Bloom Filter Data Breach Detection System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data security measures are inadequate in detecting unauthorized data breaches efficiently, as they often require sensitive data to be transferred or accessed, which can lead to further risks and complications for data owners.
Innovation Solution
A system that uses cryptographically secure representations, such as Bloom filters, to detect data breaches by comparing user-submitted secure representations of potentially stolen data with secure representations provided by data owners, without transferring actual sensitive data, and incentivizes users to report breaches with compensation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If current data security measures are used to detect unauthorized data breaches, then detection capability is provided, but sensitive data must be transferred or accessed which creates further security risks
Solution Approach 1:
The patent introduces Bloom filters as an intermediary data structure that enables breach detection without direct access to sensitive data. The Bloom filter represents the dataset in a probabilistic manner, allowing comparison of whether potentially stolen data exists in the monitored dataset without revealing actual data contents. This mediator structure eliminates the security risk of transferring sensitive data while maintaining detection capability.
Solution Approach 2:
The patent creates a cryptographic copy of the sensitive data in the form of a Bloom filter. Instead of transferring or accessing the actual sensitive data, the system transfers a mathematical representation that preserves the ability to detect breaches while containing no usable sensitive information. The Bloom filter copy enables detection functionality without exposing the original data.
2Reliability
If sensitive data is transferred for breach detection, then breach detection is enabled, but the complexity and risk of data management increases
Solution Approach 1:
The patent transforms the data from its original sensitive form into a different parameter representation using Bloom filters. The transformation changes the data from readable sensitive information into a probabilistic bit array structure that is mathematically equivalent for detection purposes but fundamentally different in form. This parameter change simplifies data management by eliminating the need to handle, store, or protect the original sensitive data during the detection process.
3Productivity
If users are incentivized to report stolen data, then detection speed increases, but the system must handle and verify user-submitted data which adds operational complexity
Solution Approach 1:
The system uses Bloom filters as an intermediary that simplifies the verification process for user-submitted data. Instead of requiring complex verification procedures to validate user reports, the system converts user-submitted potentially stolen data into Bloom filter representations and compares them against the monitored dataset's Bloom filter. This intermediary approach enables rapid verification while maintaining security, as the Bloom filter comparison operation is computationally efficient and does not require accessing actual sensitive data.
Data Source
AI summary
The subject matter of this specification generally relates to data security. In some implementations, a method includes receiving, from data owners, a first cryptographically secure representation of data to be monitored for data breaches. Each first cryptographically secure representation can include a cryptographically secure data structure that represents a plurality of first data records maintained by the data owner. One or more second cryptographically secure representations of second data records are received from a user. A number of the second cryptographically secure representations that match a corresponding portion of the first cryptographically secure representation received from a data owner is determined. A determination is made that a data breach occurred for the data owner based on the number of the second cryptographically secure representations that match the corresponding portion of the first cryptographically secure representation received from the data owner.