Role-Based Data Masking for Scalable Shared Database Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud database services face challenges in securely and scalably managing access to specific data as the amount of data increases, making it difficult to create secure access for individuals while maintaining data privacy.
Innovation Solution
A shared database platform implements dynamic masking of data based on preconfigured functions associated with user roles, transforming data in real-time to ensure secure access and scalability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If cloud database services are used to easily create new database instances, then database creation ease is improved, but data privacy and secure access management deteriorate
Solution Approach 1:
The patent segments data access by creating multiple views of the same underlying data with different masking configurations. Each view presents selectively masked data to different user roles, allowing fine-grained access control without duplicating or copying the actual data. This resolves the contradiction by enabling easy database creation while maintaining data privacy through virtual segmentation of data access paths.
Solution Approach 2:
The patent introduces a masking layer as an intermediary between the underlying data and users. This masking layer dynamically applies masking rules based on user roles, acting as a mediator that protects sensitive data while allowing controlled access. The intermediary resolves the contradiction by enabling easy database instantiation while preventing direct exposure of sensitive data through the masking buffer.
2Object-affected harmful factors
If data access is restricted for security, then data privacy is improved, but access scalability and ease of granting access deteriorate
Solution Approach 1:
The patent creates universal views that serve multiple user roles simultaneously with different masking configurations. A single view object can provide masked access to executives, partially masked access to managers, and unmasked access to analysts, all viewing the same underlying data. This resolves the contradiction by enabling scalable access control where one universal structure serves multiple security requirements without requiring separate data copies for each role.
Solution Approach 2:
The patent implements dynamic masking that automatically adjusts the level of data masking based on the requesting user's role and permissions. The masking behavior is not static but dynamically determined at query time, allowing the system to adapt to different users while maintaining consistent security policies. This resolves the contradiction by providing automated, scalable access control that maintains data privacy while easily accommodating different user needs.
3Adaptability or versatility
If data is duplicated for different users, then access control flexibility is improved, but system resource consumption and data maintenance complexity worsen
Solution Approach 1:
The patent creates virtual copies or views of the underlying data that appear as separate datasets but actually reference the same physical storage. These views provide the flexibility of having multiple data versions for different users while consuming minimal additional storage resources. This resolves the contradiction by providing access control flexibility through virtual copying rather than physical data duplication.
Data Source
AI summary
A shared database platform implements dynamic masking on data shared between users where specific data is masked, transformed, or otherwise modified based on preconfigured functions that are associated with user roles. The shared database platform can implement the masking at runtime dynamically in response to users requesting access to a database object that is associated with one or more masking policies.