Autoencryption Service for Container Sensitive Data

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Manual encryption of sensitive data in container deployment codes leads to inefficiencies, as changes in sensitive data often go unnoticed until application issues arise, requiring redeployment of containers and manual updates.

Innovation Solution

A method and system for automatically identifying, encrypting, and updating sensitive data for a group of application containers using configuration information, with automatic detection of changes through checksums, ensuring the data remains up-to-date without needing to modify container code or restart containers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual encryption of sensitive data is implemented in container deployment code, then sensitive data security is improved, but operational complexity and maintenance burden increase when data changes occur

Engineering Contradiction:

Improvesensitive data securityVSAvoidoperational complexity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system implements self-service through automated encryption service that independently handles sensitive data encryption, change detection via checksums, and container updates without requiring manual intervention from operators when sensitive data changes occur

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

An automated encryption service acts as an intermediary between sensitive data storage and container deployment code, managing the encryption/decryption process and handling updates transparently, thereby isolating the complexity from end users

Inventive Principle:

Principle #24Intermediary (Mediator)

2Loss of information

If manual updates to deployment code are performed when sensitive data changes, then data currency is improved, but time loss and productivity decrease due to redeployment requirements

Engineering Contradiction:

Improvedata currencyVSAvoidtime loss

Core Design Contradiction:

Loss of informationVSLoss of time

Solution Approach 1:

The system implements feedback mechanisms through checksum verification that automatically detects changes in sensitive data and triggers appropriate update actions, ensuring data currency while minimizing manual intervention and time loss

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The system performs preliminary actions by pre-configuring automated monitoring and update mechanisms that proactively handle sensitive data changes before they impact container operations, eliminating the need for reactive manual updates

Inventive Principle:

Principle #10Preliminary action

3Productivity

If automated encryption service is implemented, then productivity is improved by eliminating manual encryption tasks, but device complexity increases due to additional system components

Engineering Contradiction:

ImproveproductivityVSAvoiddevice complexity

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The automated encryption service is designed as a universal multi-functional component that handles encryption, decryption, change detection via checksums, and container update management, consolidating multiple functions into a single service to minimize the increase in system complexity

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12254099B2Autoencryption system for data in a container

Publication Date: 2025.03.18 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

A method that manages sensitive data. A computer system identifies the sensitive data for a group of application containers using configuration information for the group of application containers. The computer system encrypts the sensitive data identified for the group of application containers to form encrypted sensitive data. The computer system saves the encrypted sensitive data to a shared storage used by the group of application containers when the group of application containers is deployed.