Client-Server Data Routing via Regional Anonymization Node
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for ensuring data anonymity in client-server architectures are either cumbersome for users due to the need for additional agents or overly invasive with total encryption, and fail to consider the location of the client and server, making them inconvenient and non-transparent.
Innovation Solution
A method and system that divide data structures into substructures based on personal data, routing critical data through a network node with an anonymization module in a different regional network, using asymmetrical encryption and ensuring transformations are irreversible, maintaining data integrity and compliance with regulations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If additional agents are installed on user devices to ensure data anonymity, then data protection is improved, but user convenience and system transparency deteriorate
Solution Approach 1:
The patent introduces an intermediary anonymization server that acts as a mediator between the client and the target server. This server receives data from the client, performs anonymization transformations, and forwards the transformed data to the target server. This intermediary approach maintains data protection while keeping the client-side operation simple and transparent, as users only need to configure the anonymization server's address without installing additional agents on their devices.
2Reliability
If total encryption is applied to all data regardless of content, then data security is improved, but operational convenience and transparency deteriorate
Solution Approach 1:
The patent applies local quality by differentiating the treatment of data based on its content and sensitivity. Instead of uniformly encrypting all data, the system identifies personally identifiable information (PII) and applies anonymization transformations specifically to those fields. Non-sensitive data is transmitted without transformation. This selective approach maintains security for sensitive information while preserving operational convenience and transparency for non-sensitive data.
3Loss of information
If data is anonymized using reversible transformations, then data utility for analysis is improved, but data anonymity is worsened
Solution Approach 1:
The patent segments data into different components: PII fields that require anonymization and non-PII fields that can remain unchanged. For PII fields, the system applies anonymization transformations that remove personally identifiable information while preserving the statistical and analytical utility of the data. This segmentation allows the system to maintain data anonymity where needed while preserving data utility overall, as the non-PII portions remain intact and the anonymized portions retain their analytical value for statistical analysis.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed are systems and methods for routing personal data when executing queries, in a client-server architecture. A data structure intended for dispatching to the server is divided at the client side into at least two substructures. These data substructures are dispatched from the client to the server by different routes. One of the routes includes a network node with anonymization module, said node being situated in a regional network different from the regional network in which the server is located and not being in the same intranet as the server or the client. The anonymization module of the node transforms each data substructure dispatched by this route. The data substructures are combined into a structure at the server after being obtained.