Secure SQL Queries in Semi-Structured Document Databases
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Semi-structured document databases lack the ability to efficiently process SQL queries while maintaining the same data access restrictions as the database, making it difficult to integrate traditional relational database models with semi-structured data.
Innovation Solution
A processor-based apparatus that forms access permissions and relational schema indexes for semi-structured documents, allowing for the resolution of SQL queries against these indexes to produce secure relational query results, ensuring data access restrictions are maintained.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If SQL queries are added to semi-structured document databases, then query capability is improved, but data access security is compromised
Solution Approach 1:
The patent segments the document data into relational rows and columns, creating a relational view of semi-structured data. This segmentation allows SQL queries to operate on the relational structure while the underlying document storage maintains its security model. The access permissions index separates security metadata from the actual data, enabling independent handling of query processing and access control.
Solution Approach 2:
The patent introduces an access permissions index as an intermediary structure that mediates between SQL queries and the underlying document database. This index stores access control metadata separately, allowing the system to enforce document-level security permissions while processing relational queries. The intermediary layer translates relational query results into secure document access operations.
2Ease of operation
If traditional relational database model is integrated with semi-structured data, then ease of operation is improved, but system complexity increases
Solution Approach 1:
The patent creates a multi-functional system that handles both semi-structured document storage and relational query processing. The same database infrastructure supports both document-oriented operations and SQL queries, eliminating the need for separate systems. The relational schema index provides a universal interface that works with both document data and relational query patterns.
Solution Approach 2:
The patent creates relational copies of document data through indexing structures. Instead of duplicating the entire document storage system, it creates simplified relational representations (indexes) that can be queried with SQL. These index copies contain the essential data access patterns needed for relational queries while maintaining links to the original document storage.
3Reliability
If access permissions are enforced at document level, then security is improved, but query processing efficiency deteriorates
Solution Approach 1:
The patent performs preliminary actions by pre-computing and storing access permissions in the access permissions index before queries are executed. When documents are ingested or permissions change, the system proactively updates the security index structures. This preliminary preparation eliminates the need for complex permission checks during query execution, improving efficiency while maintaining security.
Solution Approach 2:
The patent adds a new dimension to security enforcement by moving from direct document-level permission checks to a separate permission index dimension. Instead of checking permissions against the document structure during queries, the system queries the permission index first to determine available documents, then processes relational queries only on authorized data. This dimensional separation optimizes both security and performance.
Data Source
AI summary
An apparatus has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to receive a relational query at a semi-structured document database. An access permissions index is looked-up for available documents for a user submitting the relational query. The relational query is resolved against relational schema within a relational schema index for the available documents to produce secure relational query results. The secure relational query results are supplied.