Semi-structured Document Database Redaction via Path Expressions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Semi-structured document databases face challenges in data security due to their lack of structural precision, making it difficult to effectively safeguard data compared to relational databases.
Innovation Solution
An apparatus with a processor and memory that stores a semi-structured document database and applies data redaction rules to form redacted documents, using built-in and user-defined redaction functions to obscure sensitive information, such as social security numbers, telephone numbers, and email addresses, through command line tools and XQuery library modules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data access controls are applied in relational databases using structured data formats, then data security is improved, but the same approach cannot be effectively applied to semi-structured documents due to their lack of formal structure
Solution Approach 1:
The patent changes the parameter of data structure from structured (relational) to semi-structured (XML/JSON) while maintaining data security through redaction rules. The system adapts security controls to work with hierarchical document structures using path expressions instead of traditional relational access controls
Solution Approach 2:
The patent introduces redaction rules as an intermediary layer between the semi-structured document database and users. These rules act as mediators that enforce data security by selectively redacting sensitive information based on path expressions, bridging the gap between flexible document structures and security requirements
2Reliability
If redaction rules are applied to semi-structured documents using path expressions, then sensitive information is effectively protected, but the complexity of defining and managing redaction rules increases
Solution Approach 1:
The patent enables the redaction system to automatically apply rules based on path expressions without requiring manual review of each document. The system self-services by automatically identifying and redacting sensitive information according to predefined rules, reducing the operational complexity of managing redactions across large document volumes
3Adaptability or versatility
If built-in and user-defined redaction functions are implemented, then flexibility in redacting different types of sensitive information is improved, but the system complexity increases
Solution Approach 1:
The patent implements a universal redaction framework that handles multiple types of sensitive information (social security numbers, telephone numbers, email addresses, etc.) through a single path expression-based system. The built-in and user-defined redaction functions provide multi-functionality, allowing the same underlying mechanism to redact various data types according to their specific formats and requirements
Data Source
AI summary
An apparatus has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to store a semi-structured document database including a collection of documents having semi-structured data formats. Data redaction rules are defined. Each data redaction rule includes a redaction type and a path expression to a redaction location within a semi-structured data format of a document within the collection of documents. The data redaction rules are applied to form redacted documents. The redacted documents are supplied.