Analyzer Log Traceability Using GDPR-Safe Identifier Replacement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The deletion of personal information and related information for GDPR compliance complicates the tracing and identification of problem locations during investigations, leading to inefficiencies in database and log analysis.
Innovation Solution
An analyzer is equipped with an analyzing unit, storage unit, and control unit that sets unique identifiers for related information, allowing for the deletion of personal information while maintaining traceability through identifier replacement in databases and logs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-affected harmful factors
If personal information and related information are deleted when outputting to external device, then information security is improved, but traceability of database and log is lost
Solution Approach 1:
The patent introduces an intermediary identifier (such as a hash value or encrypted ID) that serves as a mediator between the deleted personal information and the remaining data. This identifier allows the database and log to be traced and correlated without containing the actual personal information, thus resolving the contradiction between security and traceability.
Solution Approach 2:
The patent creates a copy of the personal information in the form of an identifier or reference value, which is then used to maintain traceability. The actual personal information is deleted, but the copy (identifier) remains in the database and log, enabling security compliance while preserving the ability to trace and investigate.
2Adaptability or versatility
If personal information and related information are deleted for GDPR compliance, then legal compliance is improved, but investigation efficiency deteriorates
Solution Approach 1:
The patent performs preliminary actions by pre-establishing identifier mapping relationships and preparing reference tables before data deletion. When investigation is needed, the identifiers can be quickly resolved to understand the context without requiring full data access, thus maintaining GDPR compliance while improving investigation efficiency.
Solution Approach 2:
The intermediary identifier acts as a bridge that allows investigators to efficiently query and trace information while working with deleted personal data. The identifier maintains the structural integrity and searchability of the database, enabling efficient investigations without violating GDPR requirements.
3Reliability
If related information is deleted from database and log, then data security is improved, but ability to identify problem location is reduced
Solution Approach 1:
The patent uses an intermediary identifier that replaces the deleted related information in the database and log. This identifier maintains the structural and relational integrity of the data, allowing investigators to easily identify problem locations and trace issues while the actual personal information remains deleted and secure.
Solution Approach 2:
The patent applies local quality by maintaining different levels of information disclosure: the identifier is visible and usable for investigation, while the actual personal information is hidden. This allows the database to have different properties in different contexts - secure for storage, but traceable for investigation purposes.
Data Source
AI summary
[Problem]Provided is an analyzer that outputs information that makes it possible to trace a database and a log.[Solution]The analyzer includes: an analyzing unit that analyzes a sample; a storage unit that stores databases DB1 to DB3 in which a sample ID linked to personal information of a patient having supplied the sample, and sample information of the sample to be analyzed by the analyzing unit, an analysis result of the sample by the analyzing unit, or the personal information of the patient are stored in a corresponding manner and, a log including the sample ID; and a control unit that sets a unique identifier for each record of the database DB1, replaces the sample ID of the log with the identifier set for the sample ID of the database DB1 which is the same as the sample ID of the log (S1108), and after deleting the sample ID and personal information of the databases DB1 to DB3 and the log (S1112), outputs the databases DB1 to DB3 and the log to an external device (S1113).