Adaptive Document Redaction via Location-Aware Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The proliferation of mobile devices has made it challenging for organizations to maintain privacy and security when accessing sensitive documents, as traditional perimeter-based security models are difficult to enforce, especially with the need for external access and the ease of data transfer using devices like USB sticks and cloud storage platforms.
Innovation Solution
A computerized method and apparatus that generates a container with multiple redacted versions of a document, each with a level of redaction corresponding to a specific viewing location, ensuring that only authorized users can access appropriate levels of sensitive information based on their location, using encryption and custom code to manage access within commercially available applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a perimeter-based security model is used to protect sensitive documents, then security is improved, but external access and convenience are worsened
Solution Approach 1:
The document is segmented into multiple versions with different redaction levels, each suitable for different viewing locations. The system divides the single document into a family of documents (original, moderately redacted, heavily redacted) that can be accessed based on location context, resolving the conflict between security and external access convenience.
Solution Approach 2:
The redaction level is made dynamic rather than static. The system automatically adjusts the redaction level based on the detected viewing location (GPS coordinates, compass bearing, accelerometer data), allowing the document to adapt its security level in real-time without requiring manual intervention or complex permission management.
2Reliability
If a special viewer application is provided to enforce redaction, then security is improved, but device complexity and deployment costs are worsened
Solution Approach 1:
The system makes standard document viewing applications multi-functional by adding a location-aware redaction layer. Instead of creating a specialized viewer, the system enhances existing applications (PDF readers, word processors) with location detection capabilities and automatic rediction selection, allowing them to handle both secure and public viewing scenarios.
Solution Approach 2:
The system introduces a location detection intermediary layer that sits between the document storage and the viewing application. This intermediary detects the device's location context and automatically selects the appropriate redaction level, eliminating the need for complex application-level security enforcement while maintaining security guarantees.
3Object-affected harmful factors
If multiple redaction levels are provided for different locations, then privacy is improved, but information loss is worsened
Solution Approach 1:
Different portions of the document ecosystem have different quality levels. The system applies local quality control by providing full-information versions for secure locations (office) and reduced-information versions for public locations (train, cafe). Each location context receives the appropriate information density, maximizing privacy protection where needed while preserving information access where safe.
Data Source
AI summary
Described are computer-based methods and apparatuses, including computer program products, for adaptive document redaction. A container is generated comprising a set of redacted documents corresponding to an original document, each redacted document having a level of redaction corresponding to a viewing location, and a header comprising encryption information for each redacted document in the set of redacted documents. A request to view the original document is received from a requesting device. The container is transmitted to the requesting device. A request for additional encryption information for a redacted document from the set of redacted documents is received from the requesting device, wherein the redacted document comprises a level of redaction for a viewing location that is equal to a location of the requesting device. The additional encryption information is transmitted to the requesting device.