Clipboard Data Protection via Confidential Flagging and Auto-Deletion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection methods fail to effectively prevent access to confidential information when multiple users share the same computing device, as they do not adequately detect and delete sensitive data from memory after it has been copied.
Innovation Solution
A method that selects and copies data, determines if it is confidential, sets a flag to mark it as such, and automatically deletes the data and the flag from memory after pasting, using predefined selection and paste field criteria, or through analysis with an OCR database, ensuring secure deletion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If confidential data is stored in memory for later use, then data accessibility is improved, but data security deteriorates because subsequent users can access the confidential information
Solution Approach 1:
The system performs preliminary detection to identify confidential data before it is stored in memory. By detecting confidential information (such as credit card numbers or passwords) before copying to clipboard, the system can preemptively protect this data by setting special flags or encryption, thereby preventing subsequent unauthorized access while still allowing the current user to access it when needed.
Solution Approach 2:
The patent introduces an intermediary protection mechanism between the confidential data and the clipboard memory. This intermediary layer includes detection modules that identify confidential data, flagging systems that mark such data, and controlled release mechanisms that prevent unauthorized pasting. This intermediary structure allows legitimate access while blocking unauthorized access by subsequent users.
2Reliability
If confidential data is deleted immediately after copying, then data security is improved, but data usability deteriorates because the data cannot be pasted later
Solution Approach 1:
The system dynamically adjusts the retention and protection level of confidential data based on real-time conditions. Rather than static deletion or retention, the system uses dynamic control mechanisms including time-based expiration, usage-based release, and conditional access. This allows the data to remain accessible to the current user while automatically becoming inaccessible after copying, thus balancing security and usability dynamically.
Solution Approach 2:
The patent applies different quality treatments to different portions of data in the clipboard. Confidential data is marked with special flags or encryption while non-confidential data remains normally accessible. This local differentiation allows the system to protect only the sensitive portions while maintaining full usability of other data, resolving the contradiction between security and usability.
3Reliability
If all copied data is treated as confidential, then data security is improved, but system performance deteriorates due to increased processing overhead
Solution Approach 1:
Instead of applying full confidential data protection to all copied data, the system applies protection selectively only to identified confidential information. The detection module uses pattern recognition (such as regex for credit card numbers or password patterns) to identify confidential data, applying protection only where necessary. This partial action approach maintains security for sensitive data while avoiding the performance overhead of protecting all data uniformly.
Solution Approach 2:
The system changes parameters such as detection sensitivity, protection level, and processing intensity based on the type and amount of confidential data detected. For example, it may adjust the strictness of pattern matching or the level of encryption applied based on the confidence level of detection. This parameter adaptation allows the system to maintain security while optimizing performance by avoiding excessive processing on non-sensitive data.
Data Source
Figure 1
Figure 2
AI summary
The present invention refers to a method for protecting data. The method comprises at least the steps: Selecting data in a first location of a screen, Copying (201) the selected data to a memory, Determining (203) if the selected or copied data represents confidential information, Setting a flag to mark the copied data in that memory as confidential data in case it is determined that the copied data represents confidential information, Pasting (202) the copied data into a second location of the screen, and Deleting (205) the copied data and the flag from the memory.