Database User Identification via Transaction Request Relaying
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current database security systems lack effective methods for user identification and authentication, particularly in centralized application server setups, which can lead to unauthorized access and compromised security.
Innovation Solution
A method for user identification that involves relaying an identifier from an application server or rich client to a database via a transaction request, using techniques such as IP address, login name, URL, HTTP request method, or environment variables, and attaching these identifiers to transaction requests through interface filters or SQL queries for secure auditing and monitoring.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional database access methods are used without user identifier relaying, then the system is simpler to implement, but database security and user identification capability are insufficient
Solution Approach 1:
The patent introduces an intermediary mechanism (filter or trigger) that sits between the application server and database, automatically capturing user identifiers from transaction requests and relaying them to the database. This intermediary handles the complexity of user identification without requiring changes to the core database or application server architecture, thus improving security while maintaining relative system simplicity.
Solution Approach 2:
The system performs preliminary action by pre-configuring filters or triggers that automatically capture and attach user identifiers to transaction requests before they reach the database. This preliminary preparation ensures user identification is already in place when transactions occur, improving security without adding complexity during actual database operations.
2Loss of information
If user identifiers are attached to every transaction request, then auditing and monitoring capability is enhanced, but the processing overhead and system performance may deteriorate
Solution Approach 1:
The patent extracts only the essential user identification information from transaction requests and attaches it as compact metadata or notes to the queries. By taking out only the necessary identifying elements rather than transmitting entire user context, the system maintains complete auditing information while minimizing the overhead added to each transaction request.
3Measurement precision
If multiple identification methods (IP address, login name, URL, etc.) are supported, then user identification accuracy is improved, but the complexity of implementing and managing these methods increases
Solution Approach 1:
The patent implements a universal filter or trigger mechanism that can handle multiple identification methods (IP address, login name, URL, environment variables) through a single unified interface. This multi-functional approach allows the system to support various identification sources without requiring separate implementation logic for each method, thus improving identification accuracy while controlling implementation complexity.
Data Source
AI summary
A method for user identification, the method comprising relaying an identifier of an application server user to a database associated with the application server, wherein the relaying is performed via a transaction request from the application server to the database.