Embedding Security Descriptors in Analytical Data Stores
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional database systems fail to provide accurate and efficient security information matching between operational and analytical data stores, leading to issues with query processing latency and unauthorized data access in multi-tenant environments.
Innovation Solution
The system retrieves and embeds security descriptors from the operational data store into analytical data stores during data acquisition, converting them into multiple-value fields for efficient querying, ensuring accurate security filtering and reducing latency by local access to security information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security configurations are enforced at the analytical data store by querying the operational data store at query time, then security accuracy is improved, but query processing latency increases significantly
Solution Approach 1:
The patent applies preliminary action by retrieving and storing security descriptors from the operational data store into the analytical data store during data acquisition, before query execution. This pre-fetching of security information eliminates the need to query the operational data store at query time, thereby maintaining security accuracy while significantly reducing query processing latency and enabling live query handling
2Productivity
If security information is not enforced at the analytical data store, then query processing speed is improved, but security protection deteriorates
Solution Approach 1:
The patent applies copying by creating a local copy of security descriptors from the operational data store and storing them in the analytical data store. This copy enables the analytical data store to enforce security configurations independently without querying the operational data store during query processing, thus maintaining both security protection and query processing speed
3Measurement precision
If security descriptors are retrieved at query time from the operational data store, then security accuracy is improved, but system complexity and latency increase
Solution Approach 1:
The patent applies preliminary action by pre-retrieving and storing security descriptors during data acquisition, eliminating the need for complex real-time querying mechanisms at query time
Solution Approach 2:
The patent extracts security descriptors from the operational data store and stores them locally in the analytical data store, separating the security information retrieval from the query processing path, thereby simplifying the system architecture and reducing query complexity
Data Source
AI summary
Methods, systems, and devices for providing matching security between data stores are described. In a database system, an operational data store may store transactional datasets and an analytical data store may store analytics datasets generated based on the transactional datasets. For these analytics datasets to efficiently inherit the security configurations of the transactional datasets, security information may be embedded in datasets retrieved from the operational data store during a data acquisition procedure. This security information may be converted into an embedded multiple-value field for storage in the analytical data store. The analytical data store may receive a query for data in a dataset, and may determine security descriptors associated with the user sending the query. The analytical data store may then filter the data based on comparing these determined security descriptors with the security information in the multiple-value field, and may transmit a query response with the filtered data.