Extensible Row Descriptor for Secure Database Metadata
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for tagging rows in database tables with meta-data lack integrity, as any user with access can alter the additional columns, leading to security issues and loss of accountability.
Innovation Solution
A database system that introduces an extensible row descriptor, which can only be modified by the database, incorporating an update rule defined by the table owner or super-user, ensuring that meta-data about operations is securely recorded and retained, even after row deletion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If an additional column is inserted into the database table to store meta-data, then the ability to tag rows with operation information is improved, but data integrity and security deteriorate because any user can alter the additional column
Solution Approach 1:
The patent extracts the meta-data storage function from regular database columns and places it in a specialized system-managed column. The extensible row descriptor column is separated from user-managed columns, with the database system exclusively controlling its updates through trigger mechanisms, thereby ensuring integrity while maintaining adaptability for meta-data storage
Solution Approach 2:
The patent introduces an intermediary mechanism (database-triggered update rules) between users and the extensible row descriptor column. This intermediary automatically updates the meta-data column when rows are modified, preventing direct user alteration while ensuring accurate meta-data recording, thus resolving the conflict between accessibility and integrity
2Ease of operation
If the extensible row descriptor can be updated by users, then ease of operation is improved, but security and accountability deteriorate
Solution Approach 1:
The patent implements a self-service mechanism where the database system automatically updates the extensible row descriptor column through triggers and update rules when row operations occur. This eliminates the need for manual user updates while ensuring security, as the system serves itself to maintain accurate meta-data without exposing the column to direct user modification
Solution Approach 2:
The patent applies preliminary anti-action by establishing update rules and triggers that preemptively prevent unauthorized user modifications to the extensible row descriptor. The system is configured in advance to automatically control updates, blocking potential security threats before they can compromise data integrity
3Loss of information
If the extensible row descriptor is retained after row deletion, then auditing capability is improved, but storage efficiency deteriorates
Solution Approach 1:
The patent segments the lifecycle management of the extensible row descriptor from the main data row. While data rows can be deleted, the extensible row descriptor records are independently managed and retained for auditing purposes. This segmentation allows the meta-data to outlive the original data row, preserving audit trails without requiring proportional storage for active data
Data Source
AI summary
One embodiment of the present invention provides a database system that facilitates modifying a row in a database table to include meta-data about operations performed on the row. During operation, the database system receives a definition for an extensible row descriptor, the extensible row descriptor indicating meta-data associated with operations performed on a row in a database table. The system then receives a condition for updating the extensible row descriptor. The system determines that executing a command satisfies the condition for updating the extensible row descriptor, and updates the extensible row descriptor.