Consent Audit Records for Traceable Pseudonymized Data Handling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in securely managing and tracing the flow of personal data while ensuring compliance with data consent requirements, leading to potential leaks and storage capacity issues due to redundant recordkeeping of identifiers before and after consent changes.
Innovation Solution
An information processing apparatus utilizing a blockchain system to manage and verify data handling records, including consent and execution records, with unique identifiers for each data-using party, ensuring traceability and reducing redundant storage by using pseudonyms for data-related parties.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If both consent records before and after identifier change are stored, then traceability of consent is improved, but storage system capacity is consumed
Solution Approach 1:
The patent extracts only the essential traceability information (consent status and identifier correspondence) from the full consent records. By storing minimal necessary data in the blockchain rather than complete consent records, the system maintains traceability while significantly reducing storage capacity consumption.
Solution Approach 2:
The patent creates simplified copies of consent records that contain only the essential traceability elements (consent existence and identifier mapping) rather than storing the complete original records. These copy records enable verification while occupying minimal storage space in the blockchain system.
2Reliability
If identifier correspondence table is stored, then verification of consent is improved, but security is worsened due to potential leakage
Solution Approach 1:
The patent segments the identifier correspondence information by storing it distributed across multiple consent records rather than in a single centralized table. Each record contains only the specific mapping relevant to that consent, preventing compilation of the complete correspondence table and reducing leakage risk while maintaining verification capability.
Solution Approach 2:
The patent introduces the blockchain as an intermediary layer that stores hashed or encoded identifier correspondences rather than plain text mappings. This intermediary representation allows verification of consent relationships while preventing direct access to the actual identifier correspondence table, thereby mitigating security risks.
Data Source
AI summary
An information processing apparatus includes processing circuitry configured to specify a first consent record that includes an identifier for a first business operator, which identifies the related party and which is assigned exclusively to the first business operator, and consent of the related party allowing the first business operator to execute a first handling of the data of the related party, and detect a related party identifier corresponding to the identifier for the first business operator included in the first consent record; and searching circuitry configured to search the first storage system for a second consent record that includes consent of the related party allowing a second business operator to execute a second handling of the data, wherein the processing circuitry is configured to generate an audit record including a record identifier that identifies the first consent record and information regarding the presence or absence of the second consent record.