Anonymous Data Routing via Segmented Substructure Transformation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IT security solutions for ensuring data anonymity in client-server architectures are either cumbersome for users due to the need for additional agents or overly burdensome with total encryption, and fail to consider the location of the client and server, leading to transparency and convenience issues.
Innovation Solution
A method where a client device divides data into substructures, assigns confidentiality levels, and sends them to nodes based on security and location, with nodes applying transformations to maintain anonymity while allowing the server to combine them for analysis without losing information necessary for statistics construction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If additional agents are installed on user devices to ensure data anonymity, then data protection is improved, but ease of operation deteriorates
Solution Approach 1:
The patent introduces an intermediary anonymization service that acts as a mediator between the client device and the server. This service receives data from clients, applies transformations to anonymize it, and forwards it to the server. The client device itself does not need additional agents, as the anonymization function is provided by this separate intermediary service, thus resolving the contradiction between data protection and ease of operation.
2Reliability
If total encryption is applied to all data, then data protection is improved, but ease of operation deteriorates
Solution Approach 1:
The patent applies different levels of transformation to different parts of the data structure based on their confidentiality requirements. Critical personal data undergoes anonymization transformation, while non-critical data may be transmitted with lighter processing. This selective approach maintains data protection for sensitive information while avoiding the operational burden of encrypting all data uniformly.
Solution Approach 2:
The system changes the parameter of transformation intensity applied to data based on its classification. Instead of applying a fixed high level of encryption to all data, the system adjusts the transformation parameter according to the data's sensitivity level and the security degree of the receiving node, thereby balancing protection with operational ease.
3Reliability
If data is anonymized to protect user privacy, then data protection is improved, but loss of information deteriorates
Solution Approach 1:
The patent segments the data structure into multiple substructures with different degrees of confidentiality. By dividing the data and applying selective transformations only to the necessary substructures containing personal data, the system protects user privacy while preserving the完整性 of the overall data structure and maintaining information needed for statistical analysis.
Solution Approach 2:
The system applies anonymization transformation only to the extent necessary - specifically to substructures containing personal data - rather than transforming the entire data structure. This partial action approach ensures data protection for sensitive information while minimizing information loss in non-sensitive areas of the data.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed herein are systems and method for sending user data in a client-server architecture with data anonymity and consistency. For example, a client device may identify, a structure to send to the server, wherein the structure comprises the user data. The client device may divide the structure into two or more substructures and for each respective substructure of the two or more substructures, the client device may (1) assign a degree of confidentiality to the respective substructure and (2) send the respective substructure to a respective node of a plurality of nodes based on the assigned degree of confidentiality and a degree of security of the respective node. The respective node may be configured to apply a respective transformation to the respective substructure and transmit the transformed respective substructure to the server. The server may be configured to combine received transformed substructures into a transformed structure.