Distributed Database Caching Credentials for Secure Record Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Distributed systems lacking shared storage complicate data processing and require secure access control between different databases.
Innovation Solution
A method for granting caching authorization by creating a caching credential that includes a record ID, user ID, and database ID, signed by the first database, allowing the second database to cache a data record image while maintaining access control and ensuring data security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If caching authorization is granted between databases in a distributed system, then data accessibility and processing efficiency are improved, but data security and access control complexity increase
Solution Approach 1:
The patent segments access control by creating record-specific authorization structures that individually define which users can grant caching permissions for specific data records. This granular segmentation allows precise control over which data can be cached by which databases, improving security while enabling efficient data sharing where appropriate.
Solution Approach 2:
The patent introduces an intermediary authorization structure and credential system that mediates between data source databases and caching databases. This intermediary mechanism verifies caching rights and manages permissions without requiring direct complex interactions between all database pairs, simplifying the overall access control architecture.
2Reliability
If individual record caching permissions are enforced, then data security is improved, but the overhead of checking and managing authorization structures increases
Solution Approach 1:
The patent applies preliminary action by pre-establishing authorization structures for data records and pre-issuing caching credentials that prove caching authorization. These credentials are created in advance and can be verified efficiently when caching requests occur, reducing the time overhead during actual data access operations while maintaining strict security controls.
3Measurement precision
If caching credentials include detailed authorization information, then access control precision is improved, but the size and complexity of credential verification increases
Solution Approach 1:
The patent extracts the essential verification elements from complex authorization structures by creating compact caching credentials that contain specific proving information. These credentials extract only the necessary authorization proof needed for verification, separating the detailed authorization logic (stored in the authorization structure) from the verification process (using the credential), thereby simplifying runtime verification while maintaining precision.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
The invention relates to a method for granting caching authorization (152) for caching an image (112) of a data record (110), which is stored in and managed by a first database (100), for a second database (120). The method comprises: • receiving a request from a user of the first database (100) to issue a caching authorization certificate (132) for the second database (120), • checking an authorization structure (170) of the data record (110) to see if the requesting user has caching rights to grant caching authorizations (152) of the data record (110), • if the check is successful, creating the caching authorization certificate (132) for the second database (120), • providing the caching authorization certificate (132) for the second database (120).