Inverted Traversal Logic for Secure Database Indexing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In database systems, especially those handling sensitive medical data, indexes can pose a security risk due to potential unauthorized access, as they provide additional entry points for intrusion and may reveal the structure or content of the data, making it vulnerable to static attacks.
Innovation Solution
A method is introduced to secure access to data items by creating a second relation using a traversal method that compares and inverts decision logic based on comparison results, making the insertion and search processes less intuitive, thereby enhancing security. This involves predefining a reference data item and using it to create a second relation that is stored separately from the original, ensuring the data's linear order is not guessable.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If indexes are used to improve data retrieval speed, then search efficiency is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The patent inverts the traditional index structure by storing data in reverse order (from end to beginning) and using inverted decision logic in the traversal method. This inversion makes the index structure unintelligible to unauthorized users who would normally exploit standard index patterns, while authenticated users with the correct traversal logic can still efficiently retrieve data. The inverted structure preserves search efficiency for authorized users but obscures the data organization from potential attackers.
2Ease of operation
If traditional traversal methods are used for index insertion, then insertion simplicity is maintained, but security against static attacks deteriorates
Solution Approach 1:
The patent applies inverted decision logic in the traversal method where the comparison results are reversed (e.g., using greater than instead of less than, or vice versa). This inversion complicates the insertion process for unauthorized users who would need to guess the correct logic, while authenticated users with the proper traversal algorithm can still perform insertions efficiently. The inverted logic acts as a security barrier against static attacks that rely on predicting insertion patterns.
3Object-affected harmful factors
If index structure is made more complex to enhance security, then security against intrusion is improved, but device complexity deteriorates
Solution Approach 1:
The patent achieves enhanced security without significantly increasing structural complexity by inverting the traversal logic rather than creating entirely new complex structures. The index maintains its fundamental tree structure for efficiency, but the inverted comparison logic and reverse-order storage provide security benefits. This approach resists intrusion while keeping the underlying data structure relatively simple and maintainable.
4Speed
If data items are stored in predictable order in indexes, then retrieval efficiency is improved, but security against guessing attacks deteriorates
Solution Approach 1:
The patent stores data items in reverse order (from end to beginning) and uses inverted decision logic during traversal, which makes the linear order of data unpredictable to unauthorized users. This inversion prevents attackers from guessing data positions based on standard indexing patterns, while authenticated users with the correct inverted traversal algorithm can still efficiently retrieve data by following the reversed logical path.
Data Source
AI summary
A method comprises predefining a reference data item; creating a relation and inserting a given data item of the set of data items into the relation; inserting each data item of the set of data items into the created relation using a traversal method, wherein the order comparing step comprises in case a comparison result of the currently traversed data item with the reference data item is different from a comparison result of the to be inserted data item with the reference data item inverting the decision logic, and using the inverted decision logic in the decision step; and providing the created relation.


