Virtual Masked Database for Secure Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Managing large databases efficiently while ensuring data security and preventing costly propagation of changes, which can lead to race conditions and application breakdowns due to lack of proper clearance in conventional systems.
Innovation Solution
Implementing a virtual masked database system with masking logic to create a bi-masked database, allowing selective data access based on user permissions, eliminating the need for external staging areas and reducing propagation costs by using view logic to provide masked or unmasked data subsets and update logic to manage changes within the original database.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If a company copies a portion of the database to an external staging area to allow faster access to data, then employee access speed is improved, but propagation cost and complexity increase
Solution Approach 1:
The patent introduces a virtual masking layer as an intermediary between the user and the physical database. This virtual layer provides fast access to subsets of data through selective masking without requiring physical copies or staging areas. The masking logic acts as a mediator that filters and presents only the necessary data portions to each user, eliminating the need for complex external staging infrastructure while maintaining fast access performance.
2Stability of the object's composition
If changes are propagated back from external staging area to original database, then data consistency is maintained, but race conditions occur due to overlapping data
Solution Approach 1:
The patent segments the database access by creating masked views that divide the data space into non-overlapping portions for different users. Each user receives a masked subset of data that is isolated from other users' data portions. This segmentation eliminates overlapping data access between users, preventing race conditions during updates while maintaining data consistency through the centralized original database structure.
3Object-affected harmful factors
If NULL values are supplied to employees without proper clearance, then data security is maintained, but downstream applications break due to lack of required values
Solution Approach 1:
The patent changes the parameter of data presentation by applying masking transformations instead of using NULL values. The masking logic transforms sensitive data into masked representations that maintain the required data format and structure, allowing downstream applications to function normally. Users without proper clearance receive masked data in the expected format rather than NULL values, preserving both security and application functionality.
4Object-affected harmful factors
If values are masked for employees without proper clearance, then data security is improved, but conflicts arise with downstream applications and data propagation
Solution Approach 1:
The patent introduces a masking logic intermediary that sits between the physical database and users. This intermediary handles the masking transformation intelligently, ensuring that masked values maintain the required data types, formats, and constraints that downstream applications expect. The masking layer adapts its output based on the specific data and application requirements, resolving conflicts between security masking and application compatibility without requiring changes to the applications themselves.
Data Source
AI summary
Systems, methods, and other embodiments associated with virtual masked databases are described. One example system includes a masking logic to mask an unmasked column of a database table to produce a masked column. The masked column is then added to the database creating a bi-masked database. A portion of the bi-masked database is then selected by a view logic and provided to a user. The view provided to the user may allow fast, conflict free queries and updates to the database. By providing the user either masked or unmasked data based on information associated with the user, an added layer of data security may be achieved.