Local Database Tunnel for Secure Mobile Document Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital mobile telecommunications systems face challenges in securely allowing un-trusted users to access and modify document databases while maintaining data integrity and controlling access permissions across multiple users and systems.
Innovation Solution
A communication system with a main database system and a local database system separated by firewalls, where user permissions are generated and tunnelled through a database connection, allowing only authorized modifications to be forwarded and synchronized, enabling un-trusted users to modify specific parts of a document database without full access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If direct access to the electronic system is granted to multiple users, then access efficiency is improved, but security and data integrity deteriorate
Solution Approach 1:
The patent segments the document database into multiple isolated document containers, each accessible only to authorized users. This segmentation allows multiple users to access the system simultaneously with improved efficiency while maintaining security, as each user's access is confined to their authorized documents only.
Solution Approach 2:
The patent introduces an intermediary access control mechanism that mediates between users and the document database. This intermediary layer verifies user credentials and enforces access permissions, enabling efficient access for authorized users while preventing unauthorized access that would compromise data integrity.
2Reliability
If access permissions are restricted for un-trusted users, then security is improved, but access efficiency deteriorates
Solution Approach 1:
The patent performs preliminary authentication and authorization actions before granting access to un-trusted users. By pre-verifying credentials and determining authorized documents in advance, the system maintains high security while improving access efficiency, as users are quickly directed to their authorized documents without repeated security checks.
Solution Approach 2:
The patent creates isolated copies of authorized documents for un-trusted users in the form of document containers. These copies allow users to access and modify their authorized documents efficiently while the original documents remain protected, maintaining security without sacrificing access efficiency.
3Adaptability or versatility
If full access is granted to modify the document database, then user flexibility is improved, but network load and security risks increase
Solution Approach 1:
The patent applies local quality by granting each user modified access only to their specific authorized documents rather than full database access. This allows users to have flexibility within their authorized scope while reducing network load, as only relevant document containers are transmitted and modified locally without affecting the entire database.
4Measurement precision
If granular permission management is implemented, then access control precision is improved, but system complexity increases
Solution Approach 1:
The patent extracts the complex permission management logic into a separate access control module that handles authentication and authorization. This extraction improves access control precision by dedicating specific functionality to permission management while reducing overall system complexity, as the core document management system remains simple and focused.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention provides for a telecommunication method using a communication system (100, 300), wherein the communication system comprises: a main database system (102); a local database system (104); a first network connection (106) for exchanging data between the main database system and the local database system, wherein the main database system and the local database system are separated by a first firewall (108); a handheld telecommunications device (110) with digital mobile telecommunication connection (114) to the local database system. The method comprises the steps of: receiving (200) a document database (126) by the main database system; receiving (202) a set of permissions (128) for the document database for a group of users; generating (204) a local database instance (130) on the local database system for an external user; copying (208) user permissions from the main database system to the local database; copying (210) a portion (134) of the document database to the local database instance; sending (212) a modification request (136) from the handheld communication device to the local database system; and forwarding (214) the modification request from the local database instance to the document database if the modification request is allowed by the user permissions; modifying (216) the document database using the modification request from the local database system to the main database system if the modification request is allowed by the set of permissions; and synchronizing (218) the portion of the document database with the modified document database through the first database tunnel.