Database Antivirus Integration via Encrypted File System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current database systems lack effective mechanisms to prevent compromise due to collusion between system administrators and database administrators, and they are vulnerable to storage of unstructured data with embedded viruses, with existing security solutions being cumbersome and not scalable.
Innovation Solution
A secured database system with built-in antivirus protection is implemented, using an encrypted file system that controls access through user privileges and integrates virus scanning capabilities, ensuring data encryption and decryption are managed by the database system to prevent unauthorized access and detect viruses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional database security mechanisms are used, then system administrators and database administrators can access and manage the database, but the system becomes vulnerable to compromise due to collusion between administrators
Solution Approach 1:
The patent introduces an encrypted file system as an intermediary layer between the database and the administrators. This mediator implements mandatory access control policies that prevent both system administrators and database administrators from accessing or compromising the database directly, thereby eliminating the collusion vulnerability while maintaining reliable security
2Object-affected harmful factors
If external antivirus software is integrated with the database system, then virus detection capability is improved, but the system complexity and scalability are degraded
Solution Approach 1:
The patent merges the antivirus functionality directly into the encrypted file system layer, combining virus scanning, detection, and prevention capabilities with the existing security infrastructure. This integration eliminates the need for separate external antivirus software while reducing overall system complexity and improving scalability across multiple systems
3Reliability
If comprehensive security measures are implemented, then database protection is improved, but the ease of operation and scalability are reduced
Solution Approach 1:
The encrypted file system implements self-service security mechanisms through mandatory access control policies that automatically enforce security rules without requiring manual intervention. The system autonomously manages encryption keys, access permissions, and virus scanning, making comprehensive security transparent to users and applications while maintaining ease of operation
Data Source
AI summary
A secured database system with built-in antivirus protection is described. In one embodiment, for example, a method of the present invention is described for securing a database system, the method comprises steps of: provisioning storage from a storage device, for storing database information; generating an encryption key so that the database information is stored on the storage device in an encrypted manner; generating a decryption key for decrypting the database information stored on the storage device, wherein access to the decryption key is controlled by the database system based on user privileges; receiving a request from a user for access to the database information; determining whether the user has been granted sufficient privileges to access the database information; if the user has been granted sufficient privileges, automatically decrypting the database information to provide the access; and otherwise denying the request if the user has not been granted sufficient privileges.