Database Replication Format Conversion for Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed database systems, existing replication methods fail to securely update data elements across multiple target tables, leaving them vulnerable as they do not apply different security levels based on destination tables, leading to potential data exposure.
Innovation Solution
The method involves creating a secondary change table to secure data elements by encrypting or transforming them, and then applying these secured data elements to target tables in different formats based on predetermined security settings, ensuring data protection across various target tables.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data replication is performed using existing methods, then data availability is improved, but data security deteriorates due to lack of format conversion and uniform security levels across target tables
Solution Approach 1:
The patent applies local quality by determining and applying different data formats to different target tables based on their specific security requirements. Each target table receives data in a format appropriate to its security level, with some tables receiving encrypted formats and others receiving non-encrypted formats, thus securing sensitive data in specific locations without compromising overall data availability
Solution Approach 2:
The patent implements parameter changes by converting data elements between different formats (encrypted and non-encrypted) based on the target table's security requirements. The system changes the encryption parameter of data elements dynamically during replication, allowing the same data to be stored with different security levels in different target tables, thereby addressing the security vulnerability while maintaining availability
2Productivity
If data elements are replicated in source format to all target tables, then replication speed is improved, but data protection deteriorates due to lack of format-specific security measures
Solution Approach 1:
The patent applies preliminary action by pre-determining the appropriate data format for each target table before replication occurs. The system stores format information in advance and automatically selects and converts data to the appropriate format during replication, ensuring data protection is built into the replication process itself rather than added as a post-processing step, thus maintaining replication efficiency while securing data
3Object-affected harmful factors
If different security levels are applied to different target tables, then data security is improved, but system complexity increases due to format determination and conversion requirements
Solution Approach 1:
The patent implements self-service by enabling target tables to effectively specify their own security requirements through pre-stored format information. Each target table has its data format requirements determined and stored in advance, allowing the replication system to automatically select and apply appropriate formats without requiring complex real-time security policy decisions, thus reducing system complexity while maintaining differentiated security levels
Data Source
AI summary
Aspects include receiving a notification that a value of a data element stored in a source storage location in a source format has been changed to an updated value. The change is replicated to a plurality of target storage locations. The replicating includes, for each of the plurality of target storage locations, determining a target format of the data element in the target storage location. The target format is one of a plurality of different formats, including the source format. Each of the different formats provide a different level of data protection for the data element. In response to determining that the target format is not the same as the source format, the updated value of the data element is converted into the target format, and the updated value of the data element is stored in the target format at the target storage location.