Graph Database Access Control With Cryptographic Policy Enforcement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data access management systems fail to provide efficient, cryptographically-assured protection for advanced data access policies, particularly in scenarios involving multiple users with varying permissions, leading to inefficiencies in storage and update propagation, and lack of support for complex organizational structures.
Innovation Solution
A system and method utilizing a graph database to implement cryptographic assurance schemes where each user has a unique key, and objects are encrypted with corresponding user keys, allowing efficient storage and update propagation by storing a single copy of each object, while supporting complex access policies through graph processing algorithms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple copies of objects are stored for different users, then each user can access the object, but storage space requirements increase significantly
Solution Approach 1:
The patent segments the access control mechanism by separating the object storage from the access permission storage. Instead of storing multiple copies of the object, it stores a single encrypted object and manages different user access rights through a graph database that tracks permissions and relationships between users and objects.
Solution Approach 2:
The patent introduces a graph database as an intermediary between the object storage and user access requests. This intermediary manages the complex access control logic by storing permission relationships, allowing multiple users to access a single object without requiring multiple object copies.
2Reliability
If multiple copies of objects are maintained for different users, then access is enabled, but update propagation becomes complex and inefficient
Solution Approach 1:
The patent separates the object data from the access permission metadata stored in the graph database. This segmentation allows the system to maintain a single copy of the object while efficiently propagating updates by only updating the permission metadata in the graph database, rather than synchronizing multiple object copies.
3Ease of manufacture
If simple encryption schemes are used, then implementation is easier, but they cannot support advanced data access policies with multiple users and groups
Solution Approach 1:
The patent creates a universal access control system using a graph database that can handle multiple types of access policies (single user access, multiple user access, group-based access, hierarchical access) through a single unified data structure and processing mechanism, rather than requiring separate encryption schemes for different policy types.
Data Source
AI summary
A system and method for efficient cryptographically-assured data access management for advanced data access policies includes: a user having a cryptographic key; a client device; and a graph database; whereby the user makes requests to the graph database using the client device; and whereby the graph database cryptographically enforces a data access policy.