Bloom Filter Password Presence Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for secure data retrieval and transmission of compromised identity information are inadequate, as they expose sensitive data to malicious actors and fail to effectively reduce the attack surface area, leading to potential compliance issues with data privacy regulations.
Innovation Solution
A system that uses hashed user identity records and partial hashes to query a database, combined with bloom filters to securely determine the presence of user credentials, reducing exposure of sensitive information and conserving computing resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If a database stores and shares personal identity information to help entities understand breached data, then the value of the database increases, but the exposure of sensitive information to malicious actors increases and data privacy compliance becomes more difficult
Solution Approach 1:
The patent introduces hash functions and bloom filters as intermediary mechanisms between the database and users. Instead of directly storing or querying plain text credentials, the system uses hashed representations and probabilistic data structures that prevent direct exposure of sensitive information while still enabling effective breach detection and tracking
Solution Approach 2:
The system creates cryptographic copies (hashes) of the original sensitive data that preserve the ability to detect breaches without exposing the actual credentials. These hash copies can be shared and queried without revealing the underlying plaintext information, thus maintaining security while providing breach visibility
2Ease of operation
If a database shares personal identity information in response to queries, then the usefulness of the database increases, but the attack surface area increases and data privacy regulations must be complied with
Solution Approach 1:
Hash functions and bloom filters serve as intermediaries that enable useful database operations (breach detection, tracking) without requiring the database to store or transmit actual sensitive credentials. This reduces the attack surface by eliminating direct exposure points while maintaining operational usefulness
Solution Approach 2:
The system transforms the parameters of data storage and querying by using hashed representations instead of plaintext credentials. This parameter change (from plaintext to hash) maintains the ability to perform breach detection while significantly reducing the security risks associated with storing and sharing actual sensitive information
Data Source
AI summary
A computer-implemented method comprises, storing user identity records in digital data repositories relating to user identity information collected from a plurality of sources, receiving a request specifying a partial hash of particular user identity information, generating and submitting a query to the digital data repositories to retrieve a set of user identity records that match the partial hash, generating and storing a bloom filter based on the plurality of user credential values associated with the particular user identity information, the bloom filter being configured to allow a client computing device to determine whether a particular user credential value that is associated with the particular user identity information is included in the plurality of user credentials represented by the bloom filter, transmitting the bloom filter to the client computing device.