Database map restructuring for data security

Patent metadata

Field	Value
Publication number	US-11874946-B2
Application number	US-202016985308-A
Country	US
Kind code	B2
Filing date	Aug 5, 2020
Priority date	Aug 5, 2020
Publication date	Jan 16, 2024
Grant date	Jan 16, 2024

Abstract

A method, system, and computer program product for providing data security through database map restructuring are provided. The method identifies related data tables within a set of data tables within a database. The method identifies a set of related data types within the related data tables. A set of similarities is determined among the set of related data types. The related data types are mapped based on the set of similarities. Based on the mapping, method restructures one or more data tables of the set of data tables to generate a restructured data table.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
identifying related data tables within a set of data tables within a database using principal component analysis, wherein the principal component analysis is based on a frequency of co-occurrence within the set of data tables and another frequency of co-occurrence of communication networks accessing data within the set of data tables, and wherein the related data tables have co-occurring principal components above a co-occurrence threshold;
identifying a set of related data types within the related data tables;
determining a set of similarities among the set of related data types;
mapping the related data types based on the set of similarities;
based on the mapping, restructuring one or more data tables of the set of data tables to generate a restructured data table, wherein the restructuring alters a column position, a data table position, and a row position of the one or more data tables;
comparing the set of related data types to a current security policy;
based on the mapping and the restructuring, modifying the current security policy by:
identifying a policy condition linked to at least one related data type, the policy condition monitoring a first field within a data table of the set of data tables; and
modify the first field to a second field within the current security policy, the second field associated with the at least one related data type in the restructured data table; and

updating a monitored field list based on the restructured data table, wherein the monitored field list comprises a set of fields respectively associated with the related data types.

2. The method of claim 1 , wherein the set of related data types are mapped to change preexisting data columns using a designated link for each related data type of the set of related data types.

3. A system, comprising:
one or more processors; and
a computer-readable storage medium, coupled to the one or more processors, storing program instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
identifying related data tables within a set of data tables within a database using principal component analysis, wherein the principal component analysis is based on a frequency of co-occurrence within the set of data tables and another frequency of co-occurrence of communication networks accessing data within the set of data tables, and wherein the related data tables have co-occurring principal components above a co-occurrence threshold;
identifying a set of related data types within the related data tables;
determining a set of similarities among the set of related data types;
mapping the related data types based on the set of similarities; and

based on the mapping, restructuring one or more data tables of the set of data tables to generate a restructured data table, wherein the restructuring alters a column position, a data table position, and a row position of the one or more data tables;
comparing the set of related data types to a current security policy;
based on the mapping and the restructuring, modifying the current security policy by:
identifying a policy condition linked to at least one related data type, the policy condition monitoring a first field within a data table of the set of data tables; and
modify the first field to a second field within the current security policy, the second field associated with the at least one related data type in the restructured data table; and

updating a monitored field list based on the restructured data table, wherein the monitored field list comprises a set of fields respectively associated with the related data types.

4. The system of claim 3 , wherein the set of related data types are mapped to change preexisting data columns using a designated link for each related data type of the set of related data types.

5. A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions being executable by one or more processors to cause the one or more processors to perform operations comprising:
identifying related data tables within a set of data tables within a database using principal component analysis, wherein the principal component analysis is based on a frequency of co-occurrence within the set of data tables and another frequency of co-occurrence of communication networks accessing data within the set of data tables, and wherein the related data tables have co-occurring principal components above a co-occurrence threshold;
identifying a set of related data types within the related data tables;
determining a set of similarities among the set of related data types;
mapping the related data types based on the set of similarities; and
based on the mapping, restructuring one or more data tables of the set of data tables to generate a restructured data table, wherein the restructuring alters a column position, a data table position, and a row position of the one or more data tables;
comparing the set of related data types to a current security policy;
based on the mapping and the restructuring, modifying the current security policy by:
identifying a policy condition linked to at least one related data type, the policy condition monitoring a first field within a data table of the set of data tables; and
modify the first field to a second field within the current security policy, the second field associated with the at least one related data type in the restructured data table; and

updating a monitored field list based on the restructured data table, wherein the monitored field list comprises a set of fields respectively associated with the related data types.

6. The computer program product of claim 5 , wherein the set of related data types are mapped to change preexisting data columns using a designated link for each related data type of the set of related data types.

Assignees

• IBM

Inventors

• Sun Shengyan
• Li Shuo
• Wang Xiaobo
• Zhang Hong Mei

Classifications

• G06F21/6227 Primary

  where protection concerns the structure of data, e.g. records, types, queries · CPC title

• G06F16/2282

  Tablespace storage structures; Management thereof · CPC title

• G06F16/258 Primary

  Data format conversion from or to a database · CPC title