Browser Extension for PII Tracking and Deletion

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Users face difficulties in managing and protecting personally identifiable information (PII) shared with multiple organization websites due to the challenge of remembering which websites the information was shared with and the complexity of manual deletion processes, which can lead to security and privacy concerns.

Innovation Solution

A computer-implemented method using a browser or browser plugin to detect, encrypt, and store PII submissions along with identifiers, allowing users to view and delete their PII by generating hashes and storing requests in a blockchain for secure and automated tracking and deletion.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If users manually track and manage PII across multiple websites, then users can control their personal information, but users face difficulty remembering which websites possess their PII and the process becomes complex

Engineering Contradiction:
ImprovePII protection reliabilityVSAvoidPII management ease
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a browser extension as an intermediary component that automatically tracks PII submissions between users and websites. The extension monitors form submissions, detects PII, and manages tracking without requiring user intervention, thus resolving the contradiction between reliable tracking and ease of operation

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system enables self-service by automatically generating hashes of submitted PII, storing them locally in the browser, and providing automated deletion capabilities. Users simply request deletion and the system handles the entire process autonomously, eliminating manual tracking efforts

Inventive Principle:
Principle #25Self-service

2Reliability

If users manually request PII deletion from each website, then users can exercise their right to be forgotten, but the process requires significant manual effort and time

Engineering Contradiction:
ImprovePII deletion reliabilityVSAvoidDeletion process time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary action by automatically generating and storing cryptographic hashes of PII at the time of submission. When deletion is requested, the pre-stored hashes enable immediate identification and deletion of the exact PII without requiring users to manually track which websites hold their information

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The browser extension acts as an intermediary that automates the deletion request process. It generates deletion requests containing the pre-stored hashes and submits them to the appropriate websites, eliminating the need for users to manually contact each website

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of operation

If PII is stored in plain text for easy retrieval, then users can easily access their information, but security and privacy are compromised

Engineering Contradiction:
ImprovePII retrieval easeVSAvoidPII security risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system changes the parameter of data representation by storing cryptographic hashes instead of plain text PII. The hashes can be retrieved and verified easily, but cannot be reversed to obtain the original PII, thus maintaining both ease of retrieval and security

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

Instead of storing the actual PII, the system stores a cryptographic copy (hash) of the data. This copy serves as a unique identifier for deletion purposes without containing any personally identifiable information, eliminating security risks while maintaining functionality

Inventive Principle:
Principle #26Copying

Data Source

PatentUS11496446B1Protecting personally identifiable information submitted through a browser
Publication Date: 2022.11.08 GEN DIGITAL INC
  • US11496446B1 patent drawing
  • US11496446B1 patent drawing
  • US11496446B1 patent drawing

AI summary

Protecting PII submitted through a browser. In some embodiments, a method may include detecting multiple PII of a user submitted to multiple organization websites through a browser. The method may also include encrypting each of the PII. The method may further include storing each of the encrypted PII along with an identifier of the organization website to which the PII was submitted. The method may also include receiving a request to view the PII along with an indicator of the organization website to which the PII was submitted. The method may further include retrieving each of the encrypted PII along with the identifier of the organization website to which the PII was submitted. The method may also include decrypting each of the encrypted PII. The method may further include displaying each of the PII along with the indicator of the organization website to which the PII was submitted.