Graded Database Search Authorization Index Structure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Databases face a contradiction between protecting sensitive data and allowing access to determine if the data is relevant, as existing methods lack effective security measures to manage tiered search permissions and access control.
Innovation Solution
A method utilizing a tiered search permission system with an index structure that includes lists of data elements, their frequency of occurrence, and storage locations, where authorization levels define the extent of data access, allowing for secure and controlled searches and data retrieval based on proof of entitlement.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control measures are strengthened to protect sensitive data, then data security is improved, but the ability to access and search data to determine relevance deteriorates
Solution Approach 1:
The patent segments the database into multiple authorization levels (first, second, and third levels) with progressively more access rights. The index structure is divided into protected areas corresponding to each authorization level, allowing different user groups to access different portions of the database based on their clearance level. This segmentation resolves the contradiction by enabling secure access control while maintaining the ability of authorized users to search and access data for relevance determination.
Solution Approach 2:
The patent introduces an intermediary authentication mechanism that verifies user authorization levels before allowing access to different database areas. The system checks whether a user's authorization level permits access to specific protected areas of the index structure before releasing data elements, frequency information, or record identifiers. This intermediary verification process ensures data security while allowing authorized users to perform meaningful searches.
2Reliability
If tiered search permissions are implemented to control data access, then data security is improved, but search functionality and data retrieval efficiency deteriorate
Solution Approach 1:
The patent performs preliminary actions by pre-organizing the database into an index structure with protected areas defined by authorization levels. Frequency information and record identifiers are pre-calculated and stored in the index, allowing efficient searches without accessing the full database. This preliminary preparation enables fast search operations within security constraints, resolving the contradiction between security and efficiency.
Solution Approach 2:
The index structure is segmented into protected areas corresponding to different authorization levels, allowing the search function to operate efficiently within each segment. The system can perform searches on the first area (data elements only), second area (data elements plus frequency information), or third area (all three levels) depending on user authorization, maintaining search efficiency while enforcing security through segmented access.
3Adaptability or versatility
If comprehensive data access is allowed to enable relevant searches, then search capability is improved, but unauthorized access to sensitive data increases
Solution Approach 1:
The patent segments the database access rights into distinct authorization levels, where users at different levels can perform different search capabilities. Level 1 users can search data elements, level 2 users can access frequency information, and level 3 users can retrieve record identifiers. This segmentation provides versatile search capabilities for authorized users while preventing unauthorized access to sensitive data by clearly defining access boundaries.
Solution Approach 2:
The system incorporates feedback mechanisms that verify user authorization levels before allowing access to specific database areas. The authentication process provides feedback to the search function about which protected areas a user is authorized to access, enabling the system to adapt search capabilities to the user's authorization level while preventing unauthorized access.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for searching a database (125) with a plurality of data records using graded search permissions. An index structure (108) of the database (125) is provided. The index structure (108) comprises a list (110) of the data elements contained in the data records of the database (125), first information (112) indicating the frequency of occurrence of the respective data elements in the database (125), and second information (114) identifying the data records in which the respective data elements are stored.