Binary Instrumentation for Mobile Data Masking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enterprises face challenges in protecting sensitive data, such as personally identifiable information (PII) and protected health information (PHI), as access requirements change over time, necessitating frequent modifications to mobile applications to comply with regulations, which is costly and inefficient.
Innovation Solution
A method and system for masking sensitive data in mobile applications by instrumenting the application binary to apply masking rules just before data display, without requiring access to the application code or backend code, using techniques like format-preserving encryption and context-based rules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If enterprises modify or rewrite applications to comply with new privacy and security requirements, then data protection compliance is improved, but development cost and time increase
Solution Approach 1:
The patent applies preliminary action by embedding masking rules and security policies into the application binary during the instrumentation phase, before the application is deployed. This allows the application to automatically adapt to privacy and security requirements without requiring future modifications when regulations change. The masking infrastructure is prepared in advance, enabling dynamic compliance adjustments through configuration rather than code changes.
Solution Approach 2:
The patent implements dynamics by making the application binary adaptable through instrumentation that allows runtime configuration of masking rules. The application can dynamically adjust its data masking behavior based on changing privacy and security requirements, enabling enterprises to respond to new regulations without rewriting code. The instrumentation layer provides a dynamic bridge between the application and evolving compliance requirements.
2Reliability
If enterprises modify or rewrite applications to comply with new privacy and security requirements, then data protection compliance is improved, but development cost increases
Solution Approach 1:
The patent applies preliminary action by embedding masking rules and security policies into the application binary during the instrumentation phase, before the application is deployed. This allows the application to automatically adapt to privacy and security requirements without requiring future modifications when regulations change. The masking infrastructure is prepared in advance, enabling dynamic compliance adjustments through configuration rather than code changes.
Solution Approach 2:
The patent uses copying by creating an instrumented version of the application binary that incorporates masking capabilities without modifying the original application code. The instrumentation process generates a copy of the binary with embedded security logic, allowing the original application to remain unchanged while the instrumented version provides compliant data masking. This approach avoids the high cost of rewriting applications while achieving the same compliance goals.
3Ease of operation
If enterprises use existing mobile applications without instrumentation, then application functionality is preserved, but sensitive data protection capability is insufficient
Solution Approach 1:
The patent applies the intermediary principle by introducing an instrumentation layer between the existing application binary and the data it processes. This instrumentation acts as a mediator that intercepts data flows, applies masking rules, and ensures sensitive data protection without altering the application's core functionality. The intermediary layer adds security capabilities to existing applications while preserving their operational integrity.
4Measurement precision
If enterprises frequently modify applications to adapt to changing access requirements, then data access control accuracy is improved, but application stability deteriorates
Solution Approach 1:
The patent applies preliminary action by embedding masking rules and security policies into the application binary during the instrumentation phase, before the application is deployed. This allows the application to automatically adapt to privacy and security requirements without requiring future modifications when regulations change. The masking infrastructure is prepared in advance, enabling dynamic compliance adjustments through configuration rather than code changes.
Solution Approach 2:
The patent implements dynamics by making the application binary adaptable through instrumentation that allows runtime configuration of masking rules. The application can dynamically adjust its data masking behavior based on changing privacy and security requirements, enabling enterprises to respond to new regulations without rewriting code. The instrumentation layer provides a dynamic bridge between the application and evolving compliance requirements.
Data Source
AI summary
In an approach to masking data in a software application associated with a mobile computing device, one or more computer processors receive a request to display data in a software application on a mobile computing device. The one or more computer processors determine whether one or more masking rules apply to the data, where determining whether one or more masking rules apply to the data is performed by an instrumentation of application binary of the software application. In response to determining that one or more masking rules apply to the data, the one or more computer processors mask, based on the one or more masking rules, the data, where masking is performed by the instrumentation of application binary of the software application.