Database Processing in Safe Execution Environment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current database processing environments are unreliable and vulnerable to malicious attacks, leading to inefficient data processing and reduced application flexibility due to the need for multiple communications and encryption/decryption operations.
Innovation Solution
A database processing method and apparatus that deploys the database in an independent, safe execution environment, where access requests are processed by querying authorization information tables to determine user permissions, and performing mask processing for unauthorized data access, thereby enhancing security and efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple communications and encryption/decryption operations are performed to ensure data security, then data safety is improved, but database processing efficiency deteriorates
Solution Approach 1:
The patent applies preliminary action by performing authorization verification before data decryption. The system checks whether the user has authorization to access encrypted data in advance, and only decrypts and returns data to authorized users. This prevents unnecessary decryption operations for unauthorized users, improving processing efficiency while maintaining security.
Solution Approach 2:
The patent extracts the authorization verification function from the data decryption process. By separating the authorization check before decryption, the system can efficiently handle unauthorized access requests without performing costly encryption/decryption operations, thus resolving the contradiction between security and efficiency.
2Reliability
If multiple communications are required between database, security platforms, and users to ensure security, then data safety is improved, but application processing flexibility deteriorates
Solution Approach 1:
The patent implements self-service by enabling the database system to autonomously perform authorization verification and selective data decryption without requiring external security platforms. The database itself manages security operations, eliminating complex multi-party communications and improving application flexibility while maintaining data safety.
3Reliability
If authorization verification is performed for all data access requests, then data security is improved, but processing time increases
Solution Approach 1:
The patent applies partial action by performing authorization verification selectively rather than universally. The system checks authorization for data access requests, but the verification process is optimized to minimize processing time impact, returning masked data only when necessary for unauthorized access attempts.
Data Source
AI summary
The present disclosure relates to a database processing method and apparatus, a device, and a medium. The method includes: receiving an access request to a database, the access request carrying a user identifier of an accessor and a data processing instruction, wherein the database is deployed in an independent, safe execution environment; if a part of the target data is encrypted data, querying, based on the user identifier of the accessor, an authorization information table in the database, to detect whether the accessor is an authorized user of the part of the target data; and if the accessor is not an authorized user, performing mask processing on the part of the target data to generate invisible masked data, and returning the masked data and remaining unencrypted target data in the target data in response to the access request.