Information Management Device Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current information management systems face challenges in accurately determining whether information from multiple tables constitutes personal information, leading to potential leaks when combinations of data are not properly set for disclosure control.
Innovation Solution
An information management device and method that includes a processor to analyze table attributes and policies, detecting predictive and personal information access by determining if SQL queries join semi-personal and related tables with specific keys, assessing risks, and masking or terminating access to prevent information leakage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If manual setting of combinations of tables for disclosure control is implemented, then access control accuracy improves, but system complexity and management burden increase
Solution Approach 1:
The system automatically analyzes SQL queries and determines whether they access personal information by examining query structures and table relationships, eliminating the need for manual configuration of disclosure control rules. The database management system performs self-assessment of access requests based on predefined personal information identification rules.
Solution Approach 2:
The system pre-identifies and flags tables containing personal information attributes before access requests occur. By analyzing table schemas and data characteristics in advance, the system prepares disclosure control parameters ahead of time, enabling automatic determination when queries are executed without real-time manual intervention.
2Ease of operation
If automatic determination of personal information through SQL query analysis is implemented, then management burden decreases, but detection precision may worsen
Solution Approach 1:
The system incorporates feedback mechanisms where access determination results are continuously refined based on query patterns and outcomes. The database management system learns from executed queries and adjusts its personal information identification accuracy through iterative improvement of analysis rules and thresholds.
Solution Approach 2:
The system introduces an intermediary analysis layer that examines SQL queries against predefined personal information identification rules before granting access. This intermediary layer acts as a buffer between the query execution engine and the data tables, automatically determining whether personal information is accessed without requiring manual review while maintaining high detection precision through structured rule-based analysis.
3Measurement precision
If access control rules are created for each data item and owner, then access control precision improves, but operation complexity increases
Solution Approach 1:
The system implements universal access control rules that apply to multiple data items and owners simultaneously. Instead of creating separate rules for each data item, the system defines general personal information identification rules that automatically apply to all queries accessing personal information, regardless of which specific table or data item is involved.
Solution Approach 2:
The system merges multiple individual access control requirements into a unified disclosure control framework. By combining the identification of personal information attributes across different tables and owners into a single analysis process, the system maintains precise access control while eliminating the need to manage separate rules for each data item.
Data Source
AI summary
An information management device includes a memory and a processor configured to receive an access request to information related to individual, the access request including designation of a first data table including first information related to the individual and a second data table including second information related to the individual, perform, in accordance with whether the first data table and the second data table include a same key, determination of whether the individual is identified based on a combination of the first information and the second information to be included in a response to the access request, and perform a stop of output of the response when it is determined that the individual is identified based on the combination.