Database Management Layer for PII Segmentation and Search
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Databases storing personally identifiable information (PII) are vulnerable to security attacks, and while encryption provides protection, it hinders searching and indexing functionalities.
Innovation Solution
Implementing a database management layer (DML) that breaks the linkage of PII portions by storing each portion in different database cells across various tables and columns, using a user ID and hashing functions to maintain secure and searchable data storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is applied to PII data in database, then security protection is improved, but searching and indexing functionalities deteriorate
Solution Approach 1:
The patent divides PII data into multiple portions and stores them in separate database cells across different tables and columns. This segmentation prevents attackers from extracting meaningful information even if they access part of the database, while still allowing the system to maintain search and indexing capabilities on non-sensitive portions or using hashing functions.
2Reliability
If PII portions are stored in different database cells, then security is improved by breaking linkages, but device complexity increases
Solution Approach 1:
The patent introduces a database management layer (DML) as an intermediary between the user interface and the database. This DML handles the complexity of managing segmented PII data, including determining which database cells store which portions, and coordinating read/write/delete/update operations across multiple cells. This abstraction layer shields users from the underlying complexity while maintaining security.
3Reliability
If database management layer is implemented to manage segmented PII, then security and functionality are improved, but processing time increases
Solution Approach 1:
The patent employs hashing functions to generate database cell locations from user IDs in advance. This preliminary computation of storage locations allows the database management layer to efficiently retrieve the correct cells without complex real-time calculations, reducing the time penalty associated with managing segmented data.
Data Source
AI summary
Systems, methods, and software can be used to secure storage of personally identifiable information. In some aspects, a method includes receiving, by at least one hardware processor, a request to store a data record, wherein the data record comprises personally identifiable information for a person; dividing, by the at least one hardware processor, the data record into at least two data entries, each of the at least two data entry comprising a respective portion of the personally identifiable information; selecting, by the at least one hardware processor, a database cell for each of the at least two data entries to store the respective portion of the personally identifiable information, wherein the database cells for different data entries are in different database tables, different database rows, or different database columns; and storing, by the at least one hardware processor, the at least two data entries in the selected database cells.