Business Data Redaction for Debugging Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer systems face challenges in protecting sensitive business data from unauthorized access during debugging processes, which can lead to data breaches and loss of consumer trust.
Innovation Solution
Implementing a business data protection system that determines user authorization through role-based access control and redacts unauthorized business data from debugging requests, ensuring only authorized data is provided to users during debugging sessions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If debugging data is provided to users during task processing, then debugging capability is improved, but data security deteriorates due to potential unauthorized access to sensitive business data
Solution Approach 1:
The patent segments debugging data into authorized and unauthorized portions by implementing role-based access control checks that divide data access permissions into distinct categories. The system separates sensitive business data from non-sensitive debugging information, providing users only with the segment they are authorized to view while maintaining complete debugging functionality for authorized portions.
Solution Approach 2:
The patent introduces an intermediary authorization checking mechanism that mediates between the debugging request and the business data. This intermediary layer verifies user permissions and filters data before presentation, acting as a security gatekeeper that enables debugging operations while preventing unauthorized data exposure.
2Productivity
If all business data is accessible during debugging, then debugging efficiency is improved, but data leakage risk increases
Solution Approach 1:
The patent applies local quality by providing different data visibility qualities to different users based on their authorization levels. Each user receives debugging data with a quality appropriate to their role - full access for administrators, restricted access for developers, and minimal access for support staff - thereby maintaining debugging efficiency for each user while limiting overall data leakage risk across the system.
Solution Approach 2:
The patent implements preliminary anti-action by performing authorization checks and data redaction before debugging data is presented to users. The system proactively prevents potential data leakage by filtering sensitive information in advance based on user permissions, rather than relying on user self-restraint or post-breach detection.
3Reliability
If debugging information is filtered for security, then data protection is improved, but debugging diagnostic capability deteriorates
Solution Approach 1:
The patent applies dynamics by making debugging data visibility dynamic and context-dependent rather than static. The system adjusts the amount and type of debugging information provided based on real-time authorization checks, user roles, and specific task contexts. This dynamic approach allows maximum diagnostic information to be provided to authorized users while automatically reducing visibility for unauthorized users, maintaining both protection and diagnostic capability.
Data Source
AI summary
Techniques for business data protection for running tasks in a computer system are described herein. An aspect includes receiving a request. Another aspect includes processing a task corresponding to the request. Another aspect includes receiving a debugging request from a user corresponding to the task, wherein the debugging request is received during the processing of the task. Another aspect includes, based on receiving the debugging request, determining whether the user is authorized to access business data corresponding to the task. Another aspect includes, based on determining that the user is not authorized to access the business data corresponding to the task, redacting the business data from debugging data corresponding to the debugging request. Another aspect includes providing the redacted debugging data to the user.


