Database Controller Access Authorization Consistency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current database systems fail to provide consistent access to data elements with relationships, especially when integrity constraints and triggers do not ensure accurate representation of interrelated data due to access authorization limitations, leading to inconsistent views for users.
Innovation Solution
A method and system where data elements are encapsulated by access procedures, with a controller verifying user authorization at the data-element level, ensuring consistent access results by managing access through access authorization data and call authorization data, even if integrity is not fully satisfied for the user.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access authorization is enforced at the data-element level to ensure security, then data security is improved, but consistent access to interrelated data elements deteriorates
Solution Approach 1:
The patent introduces an intermediary mechanism that intercepts and monitors access requests between users and data elements. When a user accesses a first data element, the system automatically checks for related second data elements and verifies authorization for those as well. This intermediary layer ensures that security constraints are satisfied while maintaining consistent views of interrelated data, resolving the contradiction between security enforcement and data consistency.
2Reliability
If traditional integrity constraints and triggers are used to ensure data consistency, then data integrity is improved, but access consistency for users with authorization limitations deteriorates
Solution Approach 1:
The patent implements a feedback mechanism where the system continuously monitors access patterns and authorization status. When a user accesses a data element, the system provides feedback by automatically checking authorization for related data elements and blocking access to any that would violate consistency requirements. This feedback loop ensures that users receive accurate and consistent views of interrelated data while respecting authorization constraints, improving upon traditional integrity constraints and triggers.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Computer-implemented methodsaredisclosed for accessing data stored in a databasesystemcomprising a controller configured in such a way that data is storedwith relationships between data-elements of the data, and with enforcement of data integrity. The method comprises: receiving, bythe controller, a call by first user to first access-procedure for accessing first data- element, the first access-procedure including a call to second access- procedure for accessing second data-element based on a relationship between first and second data-elements; performing, by the controller, the call to first access-procedure; verifying, by the controller, whether the first user is authorized to access second data-element according to access authorization data; performing, by the controller, the call to second access-procedure; and returning, by the controller, a result of the access to second data-element including an indicator of authorized access tosecond data-element.Computer programs and database systems suitable for performing such methods are also disclosed.