Inverted Traversal Logic for Secure Database Indexing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In database systems, especially those handling sensitive medical data, indexes can pose a security risk due to potential unauthorized access, as they provide additional entry points for intrusion and may reveal the structure or content of the data, making it vulnerable to static attacks.

Innovation Solution

A method is introduced to secure access to data items by creating a second relation using a traversal method that compares and inverts decision logic based on comparison results, making the insertion and search processes less intuitive, thereby enhancing security. This involves predefining a reference data item and using it to create a second relation that is stored separately from the original, ensuring the data's linear order is not guessable.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If indexes are used to improve data retrieval speed, then search efficiency is improved, but security against unauthorized access deteriorates

Engineering Contradiction:
Improvedata retrieval speedVSAvoidunauthorized access risk
Core Design Contradiction:
SpeedVSObject-affected harmful factors

Solution Approach 1:

The patent inverts the traditional index structure by storing data in reverse order (from end to beginning) and using inverted decision logic in the traversal method. This inversion makes the index structure unintelligible to unauthorized users who would normally exploit standard index patterns, while authenticated users with the correct traversal logic can still efficiently retrieve data. The inverted structure preserves search efficiency for authorized users but obscures the data organization from potential attackers.

Inventive Principle:
Principle #13The other way round (Inversion)

2Ease of operation

If traditional traversal methods are used for index insertion, then insertion simplicity is maintained, but security against static attacks deteriorates

Engineering Contradiction:
Improveinsertion simplicityVSAvoidstatic attack vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent applies inverted decision logic in the traversal method where the comparison results are reversed (e.g., using greater than instead of less than, or vice versa). This inversion complicates the insertion process for unauthorized users who would need to guess the correct logic, while authenticated users with the proper traversal algorithm can still perform insertions efficiently. The inverted logic acts as a security barrier against static attacks that rely on predicting insertion patterns.

Inventive Principle:
Principle #13The other way round (Inversion)

3Object-affected harmful factors

If index structure is made more complex to enhance security, then security against intrusion is improved, but device complexity deteriorates

Engineering Contradiction:
Improveintrusion resistanceVSAvoidindex structure complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent achieves enhanced security without significantly increasing structural complexity by inverting the traversal logic rather than creating entirely new complex structures. The index maintains its fundamental tree structure for efficiency, but the inverted comparison logic and reverse-order storage provide security benefits. This approach resists intrusion while keeping the underlying data structure relatively simple and maintainable.

Inventive Principle:
Principle #13The other way round (Inversion)

4Speed

If data items are stored in predictable order in indexes, then retrieval efficiency is improved, but security against guessing attacks deteriorates

Engineering Contradiction:
Improveretrieval efficiencyVSAvoidguessing attack vulnerability
Core Design Contradiction:
SpeedVSObject-affected harmful factors

Solution Approach 1:

The patent stores data items in reverse order (from end to beginning) and uses inverted decision logic during traversal, which makes the linear order of data unpredictable to unauthorized users. This inversion prevents attackers from guessing data positions based on standard indexing patterns, while authenticated users with the correct inverted traversal algorithm can still efficiently retrieve data by following the reversed logical path.

Inventive Principle:
Principle #13The other way round (Inversion)

Data Source

PatentUS11328091B2Method for securing access to a relation
Publication Date: 2022.05.10 COMPUGRP MEDICAL SE
  • US11328091B2 patent drawing
  • US11328091B2 patent drawing
  • US11328091B2 patent drawing

AI summary

A method comprises predefining a reference data item; creating a relation and inserting a given data item of the set of data items into the relation; inserting each data item of the set of data items into the created relation using a traversal method, wherein the order comparing step comprises in case a comparison result of the currently traversed data item with the reference data item is different from a comparison result of the to be inserted data item with the reference data item inverting the decision logic, and using the inverted decision logic in the decision step; and providing the created relation.