Graded Database Search Authorization Index Structure

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Databases face a contradiction between protecting sensitive data and allowing access to determine if the data is relevant, as existing methods lack effective security measures to manage tiered search permissions and access control.

Innovation Solution

A method utilizing a tiered search permission system with an index structure that includes lists of data elements, their frequency of occurrence, and storage locations, where authorization levels define the extent of data access, allowing for secure and controlled searches and data retrieval based on proof of entitlement.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If access control measures are strengthened to protect sensitive data, then data security is improved, but the ability to access and search data to determine relevance deteriorates

Engineering Contradiction:
Improvedata securityVSAvoiddata accessibility for relevance determination
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent segments the database into multiple authorization levels (first, second, and third levels) with progressively more access rights. The index structure is divided into protected areas corresponding to each authorization level, allowing different user groups to access different portions of the database based on their clearance level. This segmentation resolves the contradiction by enabling secure access control while maintaining the ability of authorized users to search and access data for relevance determination.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary authentication mechanism that verifies user authorization levels before allowing access to different database areas. The system checks whether a user's authorization level permits access to specific protected areas of the index structure before releasing data elements, frequency information, or record identifiers. This intermediary verification process ensures data security while allowing authorized users to perform meaningful searches.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If tiered search permissions are implemented to control data access, then data security is improved, but search functionality and data retrieval efficiency deteriorate

Engineering Contradiction:
Improvedata securityVSAvoidsearch and retrieval efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent performs preliminary actions by pre-organizing the database into an index structure with protected areas defined by authorization levels. Frequency information and record identifiers are pre-calculated and stored in the index, allowing efficient searches without accessing the full database. This preliminary preparation enables fast search operations within security constraints, resolving the contradiction between security and efficiency.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The index structure is segmented into protected areas corresponding to different authorization levels, allowing the search function to operate efficiently within each segment. The system can perform searches on the first area (data elements only), second area (data elements plus frequency information), or third area (all three levels) depending on user authorization, maintaining search efficiency while enforcing security through segmented access.

Inventive Principle:
Principle #1Segmentation

3Adaptability or versatility

If comprehensive data access is allowed to enable relevant searches, then search capability is improved, but unauthorized access to sensitive data increases

Engineering Contradiction:
Improvesearch capabilityVSAvoidunauthorized data access
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent segments the database access rights into distinct authorization levels, where users at different levels can perform different search capabilities. Level 1 users can search data elements, level 2 users can access frequency information, and level 3 users can retrieve record identifiers. This segmentation provides versatile search capabilities for authorized users while preventing unauthorized access to sensitive data by clearly defining access boundaries.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system incorporates feedback mechanisms that verify user authorization levels before allowing access to specific database areas. The authentication process provides feedback to the search function about which protected areas a user is authorized to access, enabling the system to adapt search capabilities to the user's authorization level while preventing unauthorized access.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP3964974A1Search in a database with graded search authorization
Publication Date: 2022.03.09 BUNDESDRUCKEREI GMBH
  • EP3964974A1 patent drawingFigure 1
  • EP3964974A1 patent drawingFigure 2
  • EP3964974A1 patent drawingFigure 3

AI summary

The invention relates to a method for searching a database (125) with a plurality of data records using graded search permissions. An index structure (108) of the database (125) is provided. The index structure (108) comprises a list (110) of the data elements contained in the data records of the database (125), first information (112) indicating the frequency of occurrence of the respective data elements in the database (125), and second information (114) identifying the data records in which the respective data elements are stored.