Confidential Data Security via Segmented Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a challenge in ensuring the confidentiality and accuracy of sensitive data, such as salary information, in computer systems, as users are hesitant to share this data due to privacy concerns and the difficulty in maintaining its security and reliability.
Innovation Solution
A system is implemented that securely collects, tracks, and utilizes confidential data by encrypting it with different keys for user identification and data, ensuring that no single service can access both, and using a two-pass process for data access, with a submission service handling member IDs and a data preparation service handling the actual data, while also implementing key rotation for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If confidential data is collected and stored in a computer system, then the system can utilize the data for specific purposes, but security risks increase and user privacy concerns arise
Solution Approach 1:
The patent segments confidential data into two distinct parts: member identification information and confidential data itself. These segments are stored in separate encrypted columns with different encryption keys, allowing the system to utilize the data while maintaining security through physical and cryptographic separation.
Solution Approach 2:
The patent introduces an intermediary mechanism (separate encryption keys and controlled access protocols) between the stored data and potential access points. This intermediary layer ensures that even if one part of the system is compromised, the confidential data remains protected through the additional security layer.
2Object-affected harmful factors
If confidential data is encrypted with different keys for user identification and data, then security is enhanced, but system complexity increases
Solution Approach 1:
The patent divides the encryption system into two independent key management segments: one key for member ID encryption and another for confidential data encryption. This segmentation allows each key to be managed separately, reducing the overall complexity compared to managing a single master key for all data types.
Solution Approach 2:
The system implements self-service through automated key management where the first key is derived from the second key through a one-way function. This self-generating mechanism reduces manual key management complexity while maintaining the security benefits of multiple keys.
3Object-affected harmful factors
If a two-pass process is implemented for data access, then data security is maintained, but access time increases
Solution Approach 1:
The patent implements preliminary action by pre-storing member identification information in an encrypted state with its own dedicated key. This allows the first pass (identification verification) to proceed independently and quickly, preparing the way for the second pass without creating bottlenecks in the overall access process.
4Reliability
If key rotation is implemented for enhanced security, then long-term data protection is improved, but operational complexity increases
Solution Approach 1:
The patent implements preliminary action in key rotation by pre-establishing the relationship between the two keys where the first key is derived from the second. This preliminary setup allows for systematic key rotation where only the second key needs to be changed, and the first key can be regenerated, simplifying the rotation process compared to managing completely independent keys.
Data Source
AI summary
In order to handle the security issues with regards to maintaining privacy of the submitted confidential data, in an example embodiment, no single service is permitted to access both confidential data and member identity data. This design ensures that an attacker would have to compromise more than two services to be able to associate a member with their corresponding compensation data. Thus, member privacy would be preserved if there were any single point of breach. In an example embodiment, an approach is taken where it is still possible for a member to delete his or her confidential data information.