Database View Compliance Checker Automates Privacy Masking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
As databases store increasing amounts of sensitive information, managing access to prevent unauthorized exposure becomes challenging, with existing systems failing to efficiently identify and rectify noncompliant views that inadvertently reveal confidential data.
Innovation Solution
A system that determines compliance of database views by checking if each view masks columns associated with privacy indicators, generating a report to indicate noncompliant views, and automating the review process to enhance database security and reduce network traffic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If manual review of database views is performed to ensure compliance, then compliance accuracy is improved, but labor cost and time consumption increase
Solution Approach 1:
The system enables automated self-review of database views by the compliance management system itself. The processor automatically retrieves view definitions, compares them against compliance rules, and generates compliance reports without requiring manual intervention, thus achieving both high accuracy and efficiency
Solution Approach 2:
The patent replaces manual mechanical review processes with an automated computational system. The processor executes automated queries, retrieves metadata, performs compliance checks, and generates reports programmatically, eliminating the need for human reviewers while maintaining or improving accuracy
2Reliability
If comprehensive view compliance review is conducted, then compliance coverage is improved, but network traffic increases
Solution Approach 1:
The system extracts only the necessary view metadata and compliance information from the database system through targeted queries. By retrieving only relevant data (view definitions, column information, masking settings) rather than complete dataset transfers, it achieves comprehensive compliance coverage while minimizing network traffic
Solution Approach 2:
The compliance review process is initiated proactively before potential compliance violations occur. The system pre-identifies non-compliant views and generates reports in advance, allowing organizations to address issues before they result in data breaches or regulatory violations
Data Source
AI summary
An apparatus comprises a network interface and a processor communicatively coupled to the network interface. The network interface communicates with a database comprising a plurality of columns and a plurality of views. Each view is associated with at least one column of the plurality of columns. The processor receives a request to determine one or more noncompliant views of the database. For each view and each column associated with the view, the processor determines whether the column is associated with a privacy indicator that indicates that the column should be masked and whether the view masks the column. The processor then determines that the view is noncompliant if the view does not mask at least one column that should be masked, and generates a report that indicates whether each view of the database is noncompliant. The network interface communicates the report.