Triple Store Database Security via Granular Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing triple store databases lack effective data security measures, which are essential as they grow in popularity, similar to those available in relational databases.
Innovation Solution
A server with a triple processor that processes input documents to store and manage triple permutations, and a query processor that matches query components with triples in a repository while applying document restrictions to ensure secure data retrieval, using techniques like SPARQL queries and restriction tables to enforce access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If triple store databases are used to store and retrieve triple entities, then data retrieval efficiency is improved, but data security is worsened due to lack of access control measures
Solution Approach 1:
The patent segments access control into three distinct levels: document-level restrictions (which documents a user can access), triple-level restrictions (which specific triples within documents are accessible), and permission-level restrictions (what operations users can perform). This segmentation allows fine-grained security control while maintaining efficient query processing on the triple store structure.
Solution Approach 2:
The patent introduces an intermediary security processing layer that sits between the query processor and the triple store data. This intermediary layer intercepts queries, applies security restrictions by filtering triples based on document restrictions, triple restrictions, and permission restrictions, and returns only authorized results. This mediator approach maintains the efficiency of triple store operations while adding necessary security controls.
2Reliability
If access control measures are added to triple store databases, then data security is improved, but system complexity is worsened
Solution Approach 1:
The patent creates a universal security processing framework that handles multiple types of restrictions (document-level, triple-level, permission-level) through a single integrated query processing pipeline. The same security processing logic applies regardless of which type of restriction is being evaluated, reducing overall system complexity despite the multi-layered security approach.
Solution Approach 2:
The security system is designed to be self-service by automatically evaluating restrictions and filtering results without requiring manual security checks. The query processor automatically applies document restrictions, triple restrictions, and permission restrictions to queries, eliminating the need for external security management overhead.
3Measurement precision
If granular access restrictions are applied to triples, then security precision is improved, but query processing time is worsened
Solution Approach 1:
The patent performs preliminary actions by pre-establishing document restrictions, triple restrictions, and permission restrictions before query execution. These restrictions are stored and readily available when queries are processed, allowing the security layer to quickly evaluate and filter triples without performing complex security checks during query execution. This preliminary setup enables precise security control while minimizing query processing overhead.
Data Source
AI summary
A server includes a triple processor with instructions executed by a processor to receive an input document, read and store document restrictions for the input document, specify a first triple permutation, and produce for each triple in the input document a record of the triple in accordance with the first triple permutation and the position of the triple in the document. The server also includes a query processor with instructions executed by a processor to receive a query, match components of the query to triples in a triple repository to form initial triples, remove triples from the initial triples in accordance with document restrictions associated with the triples to form final triples, and return the final triples.