Secure Virtual Database Masking via Block Sharing

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional data masking techniques are inefficient and cumbersome, requiring significant additional storage and manual effort, especially when applied across multiple application versions and distributed development teams, as they fail to effectively share and manage masked database blocks across secure snapshots.

Innovation Solution

A database storage system that creates secure containers by applying a masking function to sensitive data, allowing sharing of masked database blocks across secure snapshots, thereby reducing storage needs and improving efficiency by reusing previously created masked database blocks if the differences can be stored within a threshold storage space.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional data masking techniques are used to create secure copies of databases for developers and testers, then sensitive data is protected, but additional storage space increases significantly

Engineering Contradiction:

Improvedata securityVSAvoidstorage space

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The patent merges multiple secure snapshots that share common masked database blocks into a single storage structure. Instead of storing separate copies of masked data for each snapshot, the system combines them by identifying and sharing common blocks, reducing total storage from M×N% to M% while maintaining data security through the masking function.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent creates a universal masked database block that can serve multiple secure snapshots simultaneously. A single masked database block generated from the source database can be shared across N different secure snapshots, making the masking operation universal and eliminating the need for separate masked copies for each snapshot.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Reliability

If manual data masking processes are performed for each snapshot, then data security is maintained, but the process becomes time consuming and cumbersome

Engineering Contradiction:

Improvedata securityVSAvoidmasking process time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent performs data masking in advance when creating the first secure snapshot, and then reuses the pre-generated masked database blocks for subsequent secure snapshots. This preliminary masking action eliminates the need to repeat the time-consuming masking process for each new snapshot, significantly reducing processing time while maintaining security.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent creates copies of masked database blocks and shares them across multiple secure snapshots. Instead of performing manual masking operations for each snapshot, the system automatically copies and references the same masked blocks where applicable, dramatically reducing the time required to create additional secure snapshots.

Inventive Principle:

Principle #26Copying

3Reliability

If separate masked copies are created for each application version and development team, then data security is ensured, but device complexity increases

Engineering Contradiction:

Improvedata securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges the management of multiple secure snapshots from different application versions and development teams into a unified storage structure. By combining common masked database blocks across all snapshots, the system reduces complexity while maintaining security isolation, as all snapshots reference the same masked data through a centralized management mechanism.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent creates a universal masked database block structure that serves multiple application versions and development teams simultaneously. A single masked database block can be shared across N different secure snapshots representing different teams and versions, eliminating the need for separate masking operations and reducing system complexity while maintaining security.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS10083196B2Creating secure virtual databases storing masked data

Publication Date: 2018.09.25 DELPHIX CORP

AI summary

A database storage system creates secure snapshots or virtual databases based on a source database that stores sensitive information. The database storage system applies a masking function to the sensitive data and stores the masked data in the secure snapshot. The database storage system creates secure snapshots that share masked database blocks with other secure snapshots. The database storage system shares masked database blocks by storing information identifying a previously created masked database block for a new secure snapshot. If a masked database block for the new secure snapshot is different from the previously created masked database block, the database storage system stores metadata including the difference between the two masked database blocks. The database storage system allows sharing any transformed database blocks across snapshot, if the transformed database blocks are obtained by applying a transformation function to data of the source database.