Anonymous Data Routing via Segmented Substructure Transformation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for ensuring data anonymity in client-server architectures are either cumbersome for users or overly invasive, often requiring additional agents or total encryption, and fail to consider the location of the client and server, leading to operational difficulties and transparency issues.

Innovation Solution

A method where the client device divides data into substructures based on confidentiality and security levels, assigning each to different nodes for transformation before recombining them at the server, ensuring anonymity while maintaining necessary information for analysis and statistics without requiring additional agents or total encryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If additional agents are installed on user devices to ensure data anonymity, then data security is improved, but device complexity and ease of operation deteriorate

Engineering Contradiction:

Improvedata securityVSAvoiddevice complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces intermediary nodes (anonymization nodes) in the network infrastructure that perform data anonymization without requiring agents on user devices. These nodes act as mediators between clients and servers, transforming data structures to remove personal identifiers while preserving analytical value, thus improving data security without increasing device complexity

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent extracts personal identifiers and sensitive information from data structures before transmission to servers. By removing these identifying elements at the source or at intermediary nodes, the system achieves data anonymity without requiring complex agent software on user devices, resolving the contradiction between security and device simplicity

Inventive Principle:

Principle #2Taking out (Extraction)

2Reliability

If total encryption is applied to all data regardless of content, then data security is improved, but ease of operation and transparency deteriorate

Engineering Contradiction:

Improvedata securityVSAvoidease of operation

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent applies different levels of anonymization and protection to different parts of data structures based on their sensitivity and content. Rather than uniform total encryption, the system identifies and protects only the necessary personal identifiers while leaving other data accessible, improving ease of operation while maintaining security where needed

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The patent changes the parameters of data structures by removing or transforming specific fields (personal identifiers) rather than encrypting entire data sets. This selective transformation maintains data usability for analysis while protecting privacy, resolving the contradiction between security and operational transparency

Inventive Principle:

Principle #35Parameter changes

3Reliability

If data is anonymized by removing personal identifiers, then data security and compliance are improved, but loss of information for user identification deteriorates

Engineering Contradiction:

Improvedata securityVSAvoiduser identification information

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The patent segments data structures into distinct components: personal identifiers that are removed or anonymized, and content data that is preserved for analysis. This segmentation allows the system to eliminate identifying information while retaining useful data for statistical analysis and service improvement, balancing security with information retention

Inventive Principle:

Principle #1Segmentation

4Loss of information

If data is transmitted without anonymization, then information completeness is improved, but compliance with jurisdictional requirements deteriorates

Engineering Contradiction:

Improveinformation completenessVSAvoidcompliance with regulations

Core Design Contradiction:

Loss of informationVSReliability

Solution Approach 1:

The patent performs anonymization as a preliminary action before data transmission to servers or storage systems. By removing personal identifiers in advance, the system ensures compliance with GDPR and other jurisdictional requirements while preserving the completeness of content data for analysis, resolving the contradiction between information retention and regulatory compliance

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS11621944B2Systems and methods for anonymous and consistent data routing in a client-server architecture

Publication Date: 2023.04.04 AO KASPERSKY LAB

AI summary

Disclosed herein are systems and method for sending user data in a client-server architecture with data anonymity and consistency. In an exemplary aspect, a client device may identify, a structure to send to the server, wherein the structure comprises the user data. The client device may divide the structure into two or more substructures and for each respective substructure of the two or more substructures, the client device may (1) assign a degree of confidentiality to the respective substructure and (2) send the respective substructure to a respective node of a plurality of nodes based on the assigned degree of confidentiality and a degree of security of the respective node. The respective node may be configured to apply a respective transformation to the respective substructure and transmit the transformed respective substructure to the server. The server may be configured to combine received transformed substructures into a transformed structure.