Blockchain Smart Contracts for Verifiable Data Retention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data retention policies face challenges in access, cost, and risk, particularly due to decentralized and uncontrolled storage management, leading to difficulties in retrieving data and potential data breaches.
Innovation Solution
A blockchain-based system using smart contracts to manage data retention policies, ensuring decentralized, transparent, and immutable storage by verifying data retention details against predefined requirements before recording transactions on the blockchain.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is stored in a decentralized manner beyond IT department control, then data access flexibility is improved, but data retrieval difficulty and loss risk increase
Solution Approach 1:
The patent introduces a blockchain-based intermediary system that mediates between decentralized data storage and reliable retrieval. The blockchain ledger acts as a trusted intermediary that records data location, retention policy, and access authority information, enabling reliable data retrieval without centralized control. This resolves the contradiction by providing a neutral, immutable coordination layer.
Solution Approach 2:
The system implements feedback mechanisms where the blockchain continuously tracks data status, retention policy compliance, and access requests. Smart contracts automatically execute based on feedback from data lifecycle events, ensuring that decentralized storage maintains reliability through continuous monitoring and automated response.
2Adaptability or versatility
If data retention policies are manually managed, then policy flexibility is improved, but labor costs and error risk increase
Solution Approach 1:
The patent implements self-service through smart contracts that automatically enforce data retention policies without manual intervention. The system autonomously manages data lifecycle events including creation, storage, retention period enforcement, and deletion. This eliminates manual labor while maintaining policy flexibility through programmable rules that can be dynamically configured.
Solution Approach 2:
The patent replaces manual mechanical data management processes with automated computational systems. Smart contracts on the blockchain substitute human operators for policy enforcement, automatically tracking retention periods, verifying compliance, and executing data deletion. This substitution maintains policy adaptability while dramatically improving management efficiency and reducing errors.
3Reliability
If data storage location is centralized, then data security control is improved, but single point of failure risk increases
Solution Approach 1:
The patent segments the data management system into distinct functional components: decentralized data storage, blockchain-based policy management, and smart contract automation. This segmentation allows each component to specialize in its function, maintaining security control through distributed architecture while reducing overall system complexity through clear separation of concerns.
4Reliability
If data is stored indefinitely for compliance, then regulatory compliance is improved, but storage costs and resource consumption increase
Solution Approach 1:
The patent implements periodic action through time-based retention policies enforced by smart contracts. Data is retained for specific compliance periods and then automatically deleted or archived. This periodic retention approach ensures regulatory compliance is maintained during required periods while eliminating unnecessary long-term storage, thereby reducing resource consumption and costs.
Data Source
Figure 1A
Figure 1B
Figure 2
AI summary
A computer-implemented method of using a blockchain to provide proof of a data retention policy, wherein a smart contract defines one or more respective data retention requirements for storing data items at a storage location, and wherein the method comprises: receiving a data item and/or an encrypted version thereof, and one or more data retention details of a retention policy; supplying, to a smart contract, the data item and/or the encrypted version thereof, and the data retention details; and executing the smart contract, wherein the smart contract is configured to, when executed: determine whether the data retention details satisfy the data retention requirements; and if so, submit a transaction to the blockchain, wherein the transaction comprises the data retention details and at least one of: the data item, the encrypted version thereof, a reference to where to the data item is stored at the storage location.