Business Data Redaction for Debugging Authorization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Computer systems face challenges in protecting sensitive business data from unauthorized access during debugging processes, which can lead to data breaches and loss of consumer trust.

Innovation Solution

Implementing a business data protection system that determines user authorization through role-based access control and redacts unauthorized business data from debugging requests, ensuring only authorized data is provided to users during debugging sessions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If debugging data is provided to users during task processing, then debugging capability is improved, but data security deteriorates due to potential unauthorized access to sensitive business data

Engineering Contradiction:
Improvedebugging capabilityVSAvoiddata security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent segments debugging data into authorized and unauthorized portions by implementing role-based access control checks that divide data access permissions into distinct categories. The system separates sensitive business data from non-sensitive debugging information, providing users only with the segment they are authorized to view while maintaining complete debugging functionality for authorized portions.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary authorization checking mechanism that mediates between the debugging request and the business data. This intermediary layer verifies user permissions and filters data before presentation, acting as a security gatekeeper that enables debugging operations while preventing unauthorized data exposure.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If all business data is accessible during debugging, then debugging efficiency is improved, but data leakage risk increases

Engineering Contradiction:
Improvedebugging efficiencyVSAvoiddata leakage risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent applies local quality by providing different data visibility qualities to different users based on their authorization levels. Each user receives debugging data with a quality appropriate to their role - full access for administrators, restricted access for developers, and minimal access for support staff - thereby maintaining debugging efficiency for each user while limiting overall data leakage risk across the system.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent implements preliminary anti-action by performing authorization checks and data redaction before debugging data is presented to users. The system proactively prevents potential data leakage by filtering sensitive information in advance based on user permissions, rather than relying on user self-restraint or post-breach detection.

Inventive Principle:
Principle #9Preliminary anti-action

3Reliability

If debugging information is filtered for security, then data protection is improved, but debugging diagnostic capability deteriorates

Engineering Contradiction:
Improvedata protectionVSAvoiddebugging diagnostic capability
Core Design Contradiction:
ReliabilityVSMeasurement precision

Solution Approach 1:

The patent applies dynamics by making debugging data visibility dynamic and context-dependent rather than static. The system adjusts the amount and type of debugging information provided based on real-time authorization checks, user roles, and specific task contexts. This dynamic approach allows maximum diagnostic information to be provided to authorized users while automatically reducing visibility for unauthorized users, maintaining both protection and diagnostic capability.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS11783065B2Business data protection for running tasks in computer system
Publication Date: 2023.10.10 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US11783065B2 patent drawing
  • US11783065B2 patent drawing
  • US11783065B2 patent drawing

AI summary

Techniques for business data protection for running tasks in a computer system are described herein. An aspect includes receiving a request. Another aspect includes processing a task corresponding to the request. Another aspect includes receiving a debugging request from a user corresponding to the task, wherein the debugging request is received during the processing of the task. Another aspect includes, based on receiving the debugging request, determining whether the user is authorized to access business data corresponding to the task. Another aspect includes, based on determining that the user is not authorized to access the business data corresponding to the task, redacting the business data from debugging data corresponding to the debugging request. Another aspect includes providing the redacted debugging data to the user.