Building Entity PII Masking With Access-Based Mask Templates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Building management systems face challenges in efficiently managing and protecting large volumes of data from interconnected devices, particularly in ensuring secure access to private information while maintaining efficient data storage and processing.
Innovation Solution
A building management system that utilizes a processing circuit to select and apply mask templates based on access values, generating masked information data structures to protect private information, allowing secure access while reducing storage requirements and enabling efficient information management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional access control methods are used to protect private information in building management systems, then data security is improved, but storage requirements and system complexity increase significantly
Solution Approach 1:
The patent segments the access control system into modular mask templates that can be independently configured and applied. Each mask template represents a specific access pattern for different data fields, allowing the system to manage complex access permissions through reusable, discrete units rather than monolithic access control logic.
Solution Approach 2:
The patent creates mask templates that serve as reusable copies of access control patterns. Instead of defining access rules for each individual user or data element, the system creates template copies that can be instantiated multiple times with different parameters, significantly reducing the overall system complexity while maintaining security.
2Reliability
If comprehensive access control tables are implemented for each user, then data protection is improved, but storage requirements increase
Solution Approach 1:
The mask templates serve multiple functions simultaneously: they define access patterns, store permission rules, and act as reusable templates for generating user-specific access configurations. This multi-functionality eliminates the need for separate comprehensive access tables for each user, reducing overall storage requirements while maintaining data protection.
Solution Approach 2:
The system changes parameters by storing generic mask templates with placeholder parameters rather than concrete user-specific data. When a user needs access control, the system instantiates the template with appropriate parameter values, allowing the same template structure to serve multiple users without duplicating storage for each user's complete access profile.
3Ease of operation
If detailed user-specific access rules are stored for every user, then access permission management is improved, but ease of extension and maintenance deteriorates
Solution Approach 1:
The system performs preliminary action by pre-defining mask templates with common access patterns before users are created or access rules are needed. These templates contain pre-configured logic for handling different data types and access scenarios, so when new users or access requirements arise, the system can quickly instantiate appropriate templates without starting from scratch, facilitating easy extension.
Solution Approach 2:
The mask template system is dynamic and adaptable - new templates can be created and added to the system as new access patterns are identified, and existing templates can be modified to accommodate changing requirements. This dynamic nature allows the system to easily extend functionality without reconfiguring the entire access control framework.
Data Source
AI summary
A building system for operating a building and managing private building information includes a processing circuit configured to receive a request for information for a building entity of a building entity database. The processing circuit is configured to select one of the mask templates from the entity database based on access values associated with the requesting device and a relational link between the building entity and the mask templates, retrieve private information for the building entity in response to a reception of the request for the information, and generate a masked information data structure based on the private information and the one of the mask templates.