Dual Access Management Circuit Database Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing electronic devices lack effective management of data access between different processes, particularly in concealing confidential data and allowing flexible data usage by different software processes, leading to potential data exposure and limited customization.

Innovation Solution

The implementation of a dual access management circuit system that partitions a database into unique, shared, and extended regions, allowing controlled access by platform and application processes, ensuring data confidentiality and flexibility in data usage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If data is shared between multiple processes, then data flexibility and accessibility are improved, but data security and confidentiality deteriorate

Engineering Contradiction:
Improvedata accessibilityVSAvoiddata exposure
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The database is segmented into multiple regions with different access control levels. Each region can be independently accessed by specific processes based on predefined permissions, allowing simultaneous data sharing for some regions while maintaining confidentiality for others.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

An access management circuit acts as an intermediary between processes and the database. This mediator controls and monitors all access requests, granting permission only to authorized processes and blocking access to confidential data, thus enabling secure data sharing.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If data is concealed from certain processes, then data security is improved, but data customization and flexibility deteriorate

Engineering Contradiction:
Improvedata confidentialityVSAvoiddata customization
Core Design Contradiction:
Object-affected harmful factorsVSAdaptability or versatility

Solution Approach 1:

Different regions of the database are assigned different access control qualities. Some regions are configured to be accessible by multiple processes while others are restricted to specific processes, allowing simultaneous data confidentiality for sensitive regions and customization for application-specific regions.

Inventive Principle:
Principle #3Local quality

3Device complexity

If a single access management system is used, then system simplicity is maintained, but the ability to manage different access rights for different processes deteriorates

Engineering Contradiction:
Improvesystem structureVSAvoidaccess control flexibility
Core Design Contradiction:
Device complexityVSAdaptability or versatility

Solution Approach 1:

The access management system is segmented into multiple independent access management circuits, each responsible for managing access to specific database regions. This segmentation enables flexible access control for different processes while maintaining overall system manageability through modular architecture.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS10013427B2Electronic device and recording medium storing data management program that conceal data corresponding to type of processes
Publication Date: 2018.07.03 KYOCERA DOCUMENT SOLUTIONS INC
  • US10013427B2 patent drawing
  • US10013427B2 patent drawing
  • US10013427B2 patent drawing

AI summary

An electronic device includes a first access management circuit and a second access management circuit. The first access management circuit manages an access to a database from a first process. The second access management circuit manages an access to the database from a second process. The first access management circuit, among regions in the database, manages the access to a shared region for data to be used by both of the first process and the second process, and manages the access to a first dedicated region for data to be used by only the first process among the first process and the second process. The second access management circuit manages the access to the shared region among the regions in the database.