Security Data Deletion Across Database and WAL Files
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In existing database systems, updated security data can remain in the database file or write ahead log (WAL) file, leading to potential data integrity issues and performance deterioration.
Innovation Solution
An electronic device is equipped with a processor that identifies the state of additional files corresponding to security data and applies different processing processes based on this state to ensure secure deletion of security data from both the database file and WAL file, using structured query language (SQL) statements and application programming interface (API) commands to manage security attributes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a WAL file is used to store update processing results before updating the database file, then data integrity and atomicity of transactions are ensured, but updated security data may remain in the database file or WAL file leading to potential data leakage
Solution Approach 1:
The patent extracts security data from the WAL file and database file using secure deletion techniques. When security data is deleted, the system performs secure deletion on both the WAL file and database file to ensure the data cannot be recovered, thereby removing the harmful factor of data leakage while maintaining the WAL mechanism for data integrity.
Solution Approach 2:
The patent applies different processing methods to different types of data. For security data, secure deletion is applied specifically to the WAL file and database file, while other data continues to use standard WAL processing. This localized approach ensures security requirements are met without compromising overall system performance.
2Object-affected harmful factors
If security data is deleted from the database file, then data security is improved, but the data may remain in the WAL file causing potential restoration through forensic techniques
Solution Approach 1:
The patent extracts and securely deletes data from the WAL file when security data is deleted from the database. The system identifies that security data deletion requests should trigger secure deletion operations on both the database file and WAL file, preventing forensic recovery while maintaining transaction integrity through proper journaling.
Solution Approach 2:
The patent performs preliminary secure deletion on the WAL file before or during the database file update process. By proactively handling the WAL file secure deletion, the system ensures that security data cannot be recovered through forensic techniques while still maintaining the atomicity and integrity of the transaction through the journal mechanism.
3Productivity
If conventional deletion methods are used for security data, then processing speed is maintained, but the data can be restored by forensic techniques
Solution Approach 1:
The patent extracts security data deletion operations from conventional deletion methods and applies secure deletion techniques specifically to security data in both the WAL file and database file. This targeted approach ensures that while processing speed is maintained for standard operations, security data cannot be recovered through forensic techniques.
Solution Approach 2:
The patent applies secure deletion locally to security data rather than all data. The system identifies security data and applies enhanced deletion methods only to those specific records, maintaining processing efficiency for non-security data while preventing forensic recovery of security-sensitive information.
Data Source
AI summary
A method and a device are provided. The device includes a display, a memory and a processor operatively connected to the display or the memory, wherein the processor is configured to receive a request for updating security data in which security attributes are set in application data, identify the state of an additional file corresponding to the security data, determine a first security data processing process if the state of the identified additional file is invalid or determine a second security data processing process if the state of the identified additional file is valid, and update the security data according to the determined security data processing process.