I have a system which keeps all actions of a user in the database. The problem is that now I can track which data belongs to which user. How to make users not identifiable in the database? One of the solutions I was thinking of is开发者_JAVA百科 to store hashed user_id in the database, or create some middle table that will hashed user id.
Hashing it will not solve this problem as it can still be brought back to the user.
Are cookies or IPs something you could use?
At the end of the day if you want to be able to relate data back to a specific user it will in some way have to be linked to the user. Perhaps you could mimic other security authentication systems, such as having a user generate public and private keys and manually encrypting their data with their public key and then they'll be the only ones with access to it.
There are possibilities it depends on what your restrictions are.
精彩评论