Secure Database Management via Encrypted Data Locking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current database management systems lack adequate protection for sensitive data, leading to security risks and potential data breaches.
Innovation Solution
A system for secure database management that encrypts user requests, searches encrypted data items, locks and masks data items with the same interaction identification, and performs algebraic operations on encrypted data items to generate responses, while preventing unauthorized access and data contamination.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data items are stored in encrypted form in the database, then security of stored data is improved, but the ability to perform accurate algebraic operations on the data is worsened due to encryption artifacts introducing errors
Solution Approach 1:
The system performs preliminary error correction by identifying and correcting errors in encrypted data items before performing algebraic operations. This preliminary action ensures that the encrypted data is cleaned of artifacts that would otherwise cause inaccuracies in subsequent computations, thus maintaining both security and computational accuracy.
Solution Approach 2:
The system implements a feedback mechanism where the results of algebraic operations on encrypted data are analyzed to detect errors introduced by encryption. The detected errors are then fed back into the system to correct the encrypted data items, creating a continuous improvement loop that maintains accuracy while preserving encryption-based security.
2Productivity
If all encrypted data items are processed without filtering, then completeness of data processing is improved, but security is worsened due to potential contamination from altered data items with duplicate interaction identifications
Solution Approach 1:
The system extracts and identifies altered data items from the set of encrypted data items by detecting duplicate interaction identifications. These problematic items are then separated out and excluded from further processing, ensuring that only clean, unaltered data items are used in algebraic operations while maintaining comprehensive processing of valid data.
Solution Approach 2:
The system converts the potential harm of duplicate interaction identifications (which indicate altered data) into a beneficial filtering mechanism. By using the presence of duplicates as a signal to identify and remove compromised data items, the system transforms what would be a security vulnerability into a protective feature that enhances overall system security.
3Measurement precision
If error correction is performed multiple times to ensure accuracy, then precision of decrypted response is improved, but processing time is worsened due to repeated correction cycles
Solution Approach 1:
The system performs error correction a predetermined number of times, which may be more than the minimum required but ensures sufficient precision. This partial excessive action guarantees that the decrypted response meets the required accuracy threshold while avoiding unnecessary iterations that would waste processing time, thus balancing precision and efficiency.
Data Source
AI summary
A method includes encrypting a request received from a user device to generate an encrypted request. Encrypted data items are searched based on the encrypted request to identify desired encrypted data items. In response to determining that two or more encrypted data items of the desired encrypted data items have a same interaction identification, the two or more encrypted data items are locked and masked, and the masked two or more encrypted data items are removed. Algebraic operations are determined based on the encrypted request. An encrypted response is determined by performing the algebraic operations on the desired encrypted data items. The encrypted response is decrypted to obtain a decrypted response. An error is determined due to the algebraic operations performed on the desired encrypted data items. In response to determining that the error is less than an error threshold, the decrypted response is sent to the user device.