Confidential Data Transmission via Segmented Anonymization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face difficulties in maintaining data anonymity and compliance with regulations like GDPR in a client-server architecture, particularly when transmitting critical data across different jurisdictions, which complicates the adoption of cloud infrastructure in both corporate and private sectors.
Innovation Solution
The method involves dividing data structures into substructures containing critical data and non-critical data on the client side, with the critical data substructure being transformed and routed through a node with a transformation module, while non-critical data is sent directly to the server, ensuring compliance with regional regulations and anonymity through techniques like encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If critical data is transmitted directly to the server, then data completeness is maintained, but data anonymity and regulatory compliance are compromised
Solution Approach 1:
The data structure is divided into multiple substructures, with critical data separated into a first substructure and non-critical data into a second substructure. The first substructure is transmitted through a transformation module that anonymizes the data, while the second substructure is transmitted directly. This segmentation allows the system to maintain data completeness for statistical purposes while ensuring anonymity and compliance for critical personal information.
2Reliability
If data is anonymized through transformation, then regulatory compliance is achieved, but the ability to construct accurate statistics is reduced
Solution Approach 1:
Different quality transformations are applied to different parts of the data structure. Critical data in the first substructure undergoes anonymization transformation to meet regulatory requirements, while non-critical data in the second substructure is transmitted in its original form to preserve statistical value. This local differentiation of transformation quality allows the system to achieve compliance where necessary while maintaining statistical accuracy where possible.
3Reliability
If all data is sent through a transformation node, then data security is improved, but transmission complexity and processing time increase
Solution Approach 1:
The transmission architecture is segmented into two parallel paths: one for critical data that routes through the transformation node for anonymization, and another for non-critical data that routes directly to the server. This segmentation reduces the complexity burden by limiting the transformation path to only necessary data, while maintaining security protocols where required.
Solution Approach 2:
The transformation node acts as an intermediary that selectively processes only the first substructure containing critical data. By positioning this intermediary in the data transmission path and configuring it to process only specific data subsets, the system maintains security without requiring all data to undergo complex transformation, thus reducing overall processing time and architectural complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems and methods for transmitting critical data to a server are provided. The data structure intended for transmission to the server is divided up on the client side into a substructure containing critical data (CD) and a substructure not containing CD. The substructure containing CD is further divided up at the client side into at least two substructures and the resulting substructures are sent consecutively to the server via a node with a transformation module. The substructure not containing CD is sent directly to the server, bypassing the node with the transformation module. After receiving the substructures, they are combined at the server side into a single data structure. The critical data are data with respect to which the law of the state in whose jurisdiction the client or an authorized entity is located imposes restrictions on the gathering, storage, accessing, dissemination and processing thereof.