Distributed Database Query Processing with Security Policy Enforcement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing database systems that integrate data items from multiple databases into a single server for query processing risk unintentional leakage of sensitive information over networks, due to data transfer and inadequate authority management.
Innovation Solution
A distributed database system that processes queries across multiple database apparatuses without integrating data into a single device, using a distributed processing apparatus to generate execution plans based on security policies, divide queries, and transmit instructions to ensure secure and encrypted data processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data items from multiple databases are integrated into a single server for query processing, then query processing capability is improved, but information security deteriorates due to unintentional leakage and inadequate authority management
Solution Approach 1:
The system segments data storage across multiple database apparatuses while maintaining distributed query processing capability. Each database apparatus retains its data locally rather than consolidating into a single server, thus preventing information leakage while enabling cross-database queries through coordinated processing.
Solution Approach 2:
A distributed processing apparatus acts as an intermediary that coordinates query execution across multiple database apparatuses without consolidating data. The intermediary generates execution plans, divides queries, and aggregates results while data remains distributed, thus enabling query processing without creating a centralized data repository that could leak information.
2Object-affected harmful factors
If data is not transferred via network to prevent information leakage, then information security is improved, but database matching using member ID cannot be performed
Solution Approach 1:
The system extracts only the necessary matching criteria (such as encrypted member IDs or hashed identifiers) from the distributed databases for comparison, while keeping sensitive data localized. This extraction approach enables database matching functionality without transferring complete data sets across the network, thus maintaining security while preserving adaptability.
Solution Approach 2:
The system transforms data parameters by applying encryption or hashing functions to member IDs and other identifiers before comparison. This parameter transformation enables database matching to proceed on transformed values rather than raw data, allowing cross-database queries without exposing sensitive information through network transfer.
3Productivity
If data items are transferred across the network for processing, then query processing is enabled, but authority management becomes inadequate leading to information leakage
Solution Approach 1:
The distributed processing apparatus generates execution plans that incorporate authority verification and access control policies before query execution. By performing preliminary authority checks and embedding security constraints in the execution plan, the system ensures that only authorized data access occurs, preventing information leakage while enabling necessary query processing.
Solution Approach 2:
The system implements feedback mechanisms where execution results are verified against security policies and authority rules before being returned. The distributed processing apparatus monitors and controls data flow between database apparatuses, providing continuous feedback to ensure authority management requirements are met throughout the query processing lifecycle.
Data Source
AI summary
A database system includes: a distributed processing apparatus 1; and a plurality of database apparatuses 2, in which the distributed processing apparatus 1 includes: a generation unit 12 that generates an execution plan for a query related to the database apparatuses 2 based on a security policy; a transmission unit 13 that divides the query in accordance with the execution plan and transmits instructions to the corresponding database apparatuses 2, the instructions including divided queries obtained by dividing the query and transfer destinations of execution results of the divided queries; and an output unit 14 that receives the execution result of the query, from the database apparatus 2, and outputs the execution result, the database apparatuses 2 each include an execution unit 22 that executes the divided query included in the instruction received from the distributed processing apparatus 1, and transmits the execution result to another database apparatus or the distributed processing apparatus serving as the transfer destination included in the instruction, and at least one of the output unit 14 and the execution unit 22 encrypts the execution result in accordance with the security policy.