Row Level Database Security via Hash Qualifiers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current database security mechanisms lack granular control, often restricting access at a user level or table level, failing to effectively manage access to specific portions of database tables, which can be compromised, especially when updates are frequent or security identifiers are voluminous.
Innovation Solution
A method is introduced to establish row-level database security by identifying unique qualifiers in a database table, generating a hash value for selective combinations of these qualifiers, and associating it with users to grant access permissions to specific rows, allowing for granular access control without altering the table's structure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If access security is carried within the table at sub portion level of granularity, then access control precision is improved, but the table becomes untoward and difficult to manage during updates and when security identifiers are voluminous
Solution Approach 1:
The patent segments security control from the data table structure by introducing a separate security identifier table. This separates the security management function from the operational data table, allowing precise row-level access control without making the data table itself complex or unwieldy during updates.
Solution Approach 2:
The patent introduces a security identifier table as an intermediary between users and the data table. This intermediary layer handles all security checks and access control logic, allowing the data table to remain simple while still enforcing granular security policies through the mediating security layer.
2Measurement precision
If application-specific security mechanisms are implemented to provide sub table portion level security, then access control precision is improved, but the system becomes application centric rather than database centric and requires interface modifications that can be circumvented
Solution Approach 1:
The patent creates a universal security mechanism that works across all applications and database tables through a standardized security identifier table. This database-centric approach provides row-level security consistently across different applications without requiring application-specific modifications or interface alterations, maintaining both precision and versatility.
Data Source
AI summary
Techniques for establishing and enforcing row level database security are presented. Qualifiers are used to uniquely identify particular rows of a database table. The qualifiers are selectively combined to generate a hash value. The hash value is associated with a user. The user is permitted to accesses selective rows of the database table in response to the rows represented in the hash value, which is associated with the user.