Conditional Encryption for Mobile Device Privacy and Tracking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need to protect user privacy while allowing electronic devices to be tracked for recovery in case of theft, as employees may object to continuous monitoring of their personal devices used for both work and personal purposes.
Innovation Solution
A system and method for conditional encryption of data transferred from a device to a remote location, where data is encrypted based on conditions such as time of day, with private data encrypted outside working hours and decryptable only with user consent, and business data remaining unencrypted and decryptable by the company during working hours.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If continuous tracking of electronic devices is implemented for theft recovery, then device recovery capability is improved, but user privacy is compromised
Solution Approach 1:
The encryption state of tracked data is made dynamic rather than static. Data transitions between encrypted and unencrypted states based on temporal conditions (working hours vs. non-working hours) and authorization status. This dynamic approach allows the system to adapt to different privacy requirements at different times while maintaining continuous tracking capability.
Solution Approach 2:
The encryption parameter (encrypted vs. unencrypted) is changed based on specific conditions such as time of day and user authorization. During working hours, data may be unencrypted for business access; during non-working hours, data becomes encrypted to protect privacy. This parameter change resolves the contradiction by making privacy protection context-dependent rather than absolute.
2Loss of information
If all data is encrypted before transfer to remote location, then user privacy is protected, but business data accessibility is reduced
Solution Approach 1:
Data is segmented into different categories (business data vs. private data) with different encryption treatments. Business data generated during working hours may remain unencrypted or use business keys, while private data generated during non-working hours is encrypted with private keys. This segmentation allows selective encryption that protects privacy while maintaining business operational needs.
Solution Approach 2:
An intermediary authorization mechanism is introduced that mediates between privacy protection and business accessibility. The system uses authorization keys and temporal conditions as intermediaries to determine whether data should be encrypted or accessible. This intermediary layer allows business data to be accessible when needed while protecting private data, resolving the contradiction between privacy and accessibility.
3Adaptability or versatility
If conditional encryption is implemented based on time and authorization, then both privacy and business needs are met, but system complexity increases
Solution Approach 1:
The encryption system operates with periodic action based on temporal cycles (working hours vs. non-working hours). This periodic structure simplifies the complexity by providing predictable, rule-based encryption behavior that repeats cyclically. The system automatically switches encryption states based on time periods, reducing the need for complex manual intervention while maintaining adaptability to different privacy requirements.
Data Source
AI summary
A system is disclosed that protects private data of users while permitting the monitoring or tracking of electronic devices that are shared for both business and private purposes. The electronic devices may be configured to selectively encrypt location data, and/or other types of data, before such data is transmitted to a monitoring center. For example, data collected or generated on a user device outside of work hours may be encrypted with a private key of the device's user prior to transmission to the monitoring center, so that the data is not accessible to the employer. Data collected or generated during work hours may be transmitted without such encryption.