Cloud-Native Document Fingerprinting for Partial Data Leak Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data leakage prevention (DLP) systems in cloud storage environments are inadequate for detecting partial document thefts and rely on external solutions, compromising security by requiring IT personnel access and lacking real-time fingerprinting capabilities.

Innovation Solution

A system and method for real-time cloud-native fingerprinting within cloud storage platforms that perform granular or less-granular fingerprinting of sensitive content using machine learning, generating unique digital identifiers for each data unit, and automatically moving sensitive data to non-security folders after a predefined time, without external access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If external DLP systems are used to protect sensitive data in cloud storage, then data protection coverage is improved, but security is compromised due to requiring IT personnel access and third-party system access

Engineering Contradiction:

Improvedata protection coverageVSAvoidunauthorized access risk

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements self-service by enabling automatic fingerprinting of sensitive data within the cloud storage system itself, eliminating the need for external IT personnel or third-party systems to access or manage the data. The system autonomously identifies, fingerprints, and protects sensitive information without human intervention, thereby maintaining comprehensive protection coverage while eliminating access-related security risks.

Inventive Principle:

Principle #25Self-service

2Ease of manufacture

If metadata tags are used to protect entire documents, then document-level protection is achieved, but partial document thefts go undetected

Engineering Contradiction:

Improveprotection implementation simplicityVSAvoiddata leakage detection precision

Core Design Contradiction:

Ease of manufactureVSMeasurement precision

Solution Approach 1:

The patent applies segmentation by dividing the document into individual data units (such as cells in spreadsheets or paragraphs in text documents) and generating unique fingerprints for each unit. This granular approach enables the system to detect partial thefts of specific data units while maintaining the simplicity of document-level protection implementation through automatic fingerprinting.

Inventive Principle:

Principle #1Segmentation

3Adaptability or versatility

If documents are downloaded to external systems for fingerprinting, then fingerprinting capability is achieved, but data security risk increases

Engineering Contradiction:

Improvefingerprinting capabilityVSAvoiddata security risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an intermediary fingerprinting mechanism that operates within the cloud storage environment itself. Instead of downloading documents to external systems, the fingerprinting process is mediated through the cloud storage platform's native capabilities, allowing comprehensive fingerprinting coverage while keeping sensitive data within the secure cloud environment throughout the entire process.

Inventive Principle:

Principle #24Intermediary (Mediator)

4Reliability

If continuous monitoring of sensitive data is performed, then data leakage detection is improved, but security resource consumption increases

Engineering Contradiction:

Improvedata leakage detectionVSAvoidsecurity resource consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements periodic monitoring by automatically moving fingerprinted sensitive data from security folders to non-security folders after a predefined time period. This periodic action maintains continuous detection capability for active sensitive data while reducing security resource consumption by transitioning data to lower-security storage after the monitoring period expires, thereby balancing detection reliability with resource efficiency.

Inventive Principle:

Principle #19Periodic action

Data Source

PatentUS20260073067A1System and method for preventing data leakage by realtime native fingerprinting inside a cloud storage

Publication Date: 2026.03.12 SHRIVASTAVA VIKALP

AI summary

The present disclosure provides a system and a method for performing real-time cloud-native fingerprinting and managing sensitive content within a cloud storage platform to prevent data leakage. The system comprises a cloud storage platform comprising a data leakage prevention (DLP) server. The DLP server configured for receiving and storing a sensitive document, receiving a sensitivity level of the sensitive document, fingerprinting the sensitive document based on the sensitivity level, indexing and storing the fingerprint, sharing the fingerprint to an endpoint security agent, receiving leak indication, performing leak analysis and notifying the leak to a document owner. The system and method further perform monitoring of the sensitive data that has been fingerprinted and stored under a security folder, for a predefined time and automatically moving the sensitive data from the security folder after the predefined time.