Database Web Services Catalog Security Architecture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing web service security systems require professional programming and are vulnerable to malicious code, necessitating a solution that can implement security checks and authorization within the database itself, reducing reliance on external web servers and enhancing security.
Innovation Solution
A database-controlled web services architecture that includes a processing unit, system memory, and a web services catalog to determine access authorization levels, perform syntax checks, and manage security, allowing direct communication between databases without an intermediary web host, enabling non-professional users to write database access procedures using scripting languages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security checking is implemented on the web server computer, then security against malicious code is improved, but the system requires professional programming knowledge and has vulnerabilities to exploits
Solution Approach 1:
The patent introduces a web services catalog as an intermediary component that mediates between the web server and the database. This catalog stores pre-defined security rules and access authorization levels, allowing the database to perform security checks without requiring complex programming on the web server side. The intermediary handles the security logic centrally, reducing the need for professional programming while maintaining security effectiveness.
Solution Approach 2:
The database system performs security checking and access authorization autonomously using the web services catalog. Instead of relying on the web server computer to implement security checks, the database itself queries the catalog for authorization levels and validates requests independently. This self-service approach eliminates the need for professional programming of security checks while maintaining reliable security protection.
2Ease of operation
If a web server computer is used to access databases, then access control is simplified, but security weaknesses can be exploited by criminals and hackers
Solution Approach 1:
The web services catalog serves as a secure intermediary that stores access authorization levels and security rules. When a database receives a request, it queries the catalog for the appropriate authorization level and validates the request accordingly. This intermediary approach maintains ease of access control while preventing security exploits by using a centralized, securely-managed authorization system rather than relying on potentially vulnerable web server security checks.
Solution Approach 2:
The web services catalog pre-establishes access authorization levels and security rules before requests are processed. By determining authorization levels in advance and storing them in the catalog, the system can quickly validate requests without needing complex real-time security checking on the web server. This preliminary action reduces the window for security exploits while maintaining easy access control.
3Reliability
If security checking is performed on the web server computer, then request validation is improved, but the web server becomes a target for malicious code
Solution Approach 1:
The web services catalog acts as an intermediary that stores security rules and authorization levels, allowing the database to perform request validation without complex programming on the web server. The catalog provides a simple interface for the database to query authorization levels and validate requests, improving request validation reliability while reducing web server programming complexity.
Solution Approach 2:
The database system performs request validation autonomously by querying the web services catalog for authorization levels. Instead of requiring the web server to implement complex security checking logic, the database itself handles validation using pre-stored security rules in the catalog. This self-service approach improves request validation while minimizing web server programming requirements.
Data Source
AI summary
A first electronic computing device includes a processing unit and system memory. A first electronic database is installed on the first electronic computing device. The system memory includes instructions which, when executed by the processing unit, cause the first electronic database to receive a request from a second electronic computing device to access information stored on the first electronic database. A web services catalog that is part of the first electronic database is used to determine an access authorization level for the request. When a determination is made that the access authorization level is valid for the request, a security check is performed on a syntax of the access request. When a determination is made that the syntax is valid, the requested information is obtained from one or more tables in the first electronic database and the requested information is sent to the second electronic computing device.