Database Result Set Sorting with Independent Data Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security mechanisms in databases are inadequate for protecting sensitive data from inappropriate and unauthorized access, as they may inadvertently reveal information even after filtering, due to the sorting of records in a result set.
Innovation Solution
A method and system that filter and sort database result sets independently of removed sensitive data, ensuring that records are placed in a position that does not indicate the value of the removed data, thereby maintaining data privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-affected harmful factors
If data filtering is applied to remove sensitive data from result sets, then data security is improved, but information leakage through sorting positions occurs
Solution Approach 1:
The patent segments the data access process into distinct phases: data retrieval, data filtering, and data sorting. By separating these operations, the system can filter sensitive data while maintaining the ability to sort non-sensitive data, preventing information leakage through sorting positions of removed data.
Solution Approach 2:
The patent extracts and removes only the sensitive data portions from the result set while preserving the structure and ordering capability for non-sensitive data. This extraction allows the system to maintain security by removing sensitive information while preventing leakage through independent sorting of remaining data.
2Object-affected harmful factors
If column level filtering is applied to restrict access to sensitive fields, then access control is improved, but research capability deteriorates
Solution Approach 1:
The patent applies local quality filtering at the value level rather than uniformly at the column level. This allows selective filtering of specific sensitive values within a column while preserving access to non-sensitive values, thereby maintaining research capability while improving access control for sensitive data.
Solution Approach 2:
The patent implements partial filtering by removing only the portions of data that are sensitive (excessive action applied selectively) rather than removing entire columns. This partial approach maintains research capability by preserving non-sensitive data while improving access control for sensitive information.
Data Source
AI summary
A method, system and article of manufacture for protecting sensitive data in databases and, more particularly, for managing access to sensitive data in a database. One embodiment comprises receiving a query against the data in the database comprising at least (i) a result field specification, and (ii) a sorting instruction. The method further comprises retrieving a result set from the database, and filtering the retrieved result set on the basis of predefined filtering rules to remove selected data from a selected result field of at least one data record included with the retrieved result set. The filtered result set is sorted according to the sorting instruction to produce the sorted result set, whereby the sorting is done independently of the removed selected data so that the sorted result set places the at least one data record at a position which is non-indicative of a value of the removed selected data.