Database Table Obfuscation via One-Way Function Linkage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securing sensitive data in relational databases are imperfect, as they can be easily reconstructed and are often costly and inefficient, particularly due to the computational overhead of encryption.
Innovation Solution
Obfuscating relationships between data in database tables by dividing an input data set into two tables, where a key field in one table is populated with values generated by a one-way function, allowing only access to the one-way function and unique values to associate corresponding rows, thus protecting sensitive data without the need for encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is used to protect sensitive data in databases, then security is improved, but computational overhead increases and database operations become less efficient
Solution Approach 1:
The patent divides database contents into multiple subsets (first table and second table) with different sensitivity levels. Sensitive data is segregated into separate tables rather than encrypting all data, allowing efficient operations on non-sensitive data while maintaining security for sensitive data through the one-way function linkage.
Solution Approach 2:
The patent introduces a one-way function as an intermediary mechanism to link data across tables without requiring encryption. The one-way function acts as a mediator that allows authorized users to reconstruct relationships between data subsets while preventing unauthorized access, eliminating the need for computationally intensive encryption operations.
2Reliability
If data is divided into multiple subsets with common key fields for security, then security is improved, but the subsets can be easily reconstructed
Solution Approach 1:
The patent creates an asymmetric linkage mechanism where the second table contains one-way function outputs based on unique values from the first table. This asymmetric design means that while authorized users can reconstruct relationships by applying the one-way function in reverse, unauthorized users cannot reconstruct the linkage between subsets, thereby preventing easy data reconstruction while maintaining security.
3Reliability
If encryption is applied to all database contents, then security is improved, but cost and computational overhead increase
Solution Approach 1:
The patent applies different security measures to different parts of the database based on their sensitivity. Only sensitive data is protected through the one-way function linkage mechanism, while non-sensitive data remains accessible without additional computational overhead. This local quality approach allows selective security protection, reducing overall computational resource consumption compared to encrypting all data.
Data Source
AI summary
Relationships between data in database tables are obfuscated. An input data set is divided into two database tables with corresponding rows. A key field if created in a second one of the tables, and for each row, the field is populated with a value generated with a one-way function, using a unique value associated with the corresponding row of the first one of the tables as an input. The two tables are stored in a data store, so that the data in corresponding rows may be associated only with access to the one way function, and the unique value associated with a row of the first table.