Conditional Redaction of Electronic Documents
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional redaction techniques require multiple copies of documents for different levels of redaction, are inflexible, inefficient, and often fail to effectively restrict access, leading to unnecessary labor and potential exposure of sensitive information.
Innovation Solution
A software and/or hardware facility that conditionally redacts documents based on specified criteria, evaluating these criteria in real-time to determine what portions of a document should be made available to a user, allowing for dynamic control of access and reducing the need for multiple copies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional redaction techniques are used to create multiple copies of documents for different levels of redaction, then access control for different users is improved, but device complexity and resource requirements increase
Solution Approach 1:
The patent merges multiple redacted document copies into a single master document stored in the system. Instead of maintaining separate physical or electronic copies for different users with different redaction levels, the system combines all redaction rules and document versions into one centralized repository, reducing complexity while maintaining access control
Solution Approach 2:
The system creates a universal document storage solution that serves multiple functions: storing the master document, managing multiple redaction rules, evaluating user credentials, and dynamically generating appropriate redacted versions. This multi-functional approach eliminates the need for separate document copies for each user or redaction level
2Reliability
If multiple copies of documents are created and maintained for different redaction levels, then access control is improved, but loss of time and labor efficiency worsen
Solution Approach 1:
The system performs preliminary actions by pre-establishing redaction rules and storing them associated with the master document before any user requests. When a user requests a document, the system already has the redaction criteria ready to evaluate, eliminating the need to create or modify document copies at the time of request
Solution Approach 2:
The system provides self-service by automatically evaluating user credentials against stored redaction rules and dynamically generating the appropriate redacted document version without requiring manual intervention. The system serves itself by managing the entire redaction process automatically, from credential verification to document generation
3Reliability
If conventional redaction methods are used, then document security is improved by restricting access, but adaptability worsens as redaction criteria cannot change over time
Solution Approach 1:
The system implements dynamic redaction criteria that can change over time. Redaction rules are stored in a flexible format that allows modification of criteria such as user credentials, time periods, and document portions. When criteria change, the system automatically re-evaluates user requests against the updated rules without requiring manual re-redaction of documents
Solution Approach 2:
The system allows parameter changes in redaction criteria, such as modifying user credential requirements, time-based access rules, or document portion specifications. These parameter changes are stored and automatically applied to future document requests, enabling the system to adapt to changing security requirements while maintaining document security
4Reliability
If multiple redacted copies are maintained, then access control for different users is improved, but loss of information and potential exposure of sensitive information worsen
Solution Approach 1:
The system introduces an intermediary layer between the master document and users. This intermediary consists of the redaction rules and evaluation logic that automatically filter document content based on user credentials. This intermediary ensures that sensitive information is protected while allowing authorized users to access appropriate content, preventing both over-exposure and unauthorized access
Data Source
AI summary
A facility for performing contingent redaction of one or more portions of a document is described. The facility receives a request to materialize an identified document that identifies an entity for which the identified document is to be materialized. For a portion of the document identified by the request, the facility retrieves a criterion that must be satisfied to include the portion in a materialization of the document identified by the request. The facility evaluates the criterion for the entity identified by the request with respect to a present time. The facility causes the document identified by the request to be materialized for the entity identified by the request in a manner consistent with the result of the evaluation.