Context-Aware Sensitive Data Obfuscation System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for identifying and obfuscating sensitive information in data processing systems rely solely on pattern matching and keyword searches, which are inefficient and can lead to accidental disclosure of sensitive information within a company.
Innovation Solution
A system, method, and computer program product that determine the context of received content and scan it for sensitive information using predefined data patterns, assigning a confidence value to the identification and obfuscating the sensitive information if the confidence threshold is met.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If pattern matching and keyword searches are used to identify sensitive information, then the identification process is simple and fast, but the accuracy is low and false positives occur
Solution Approach 1:
The patent combines multiple identification methods (pattern matching, keyword searches, and context analysis) into a unified system that cross-validates results. The context analysis component examines surrounding text, data types, and relationships to verify sensitive information identifications, reducing false positives while maintaining system manageability through modular architecture.
Solution Approach 2:
The patent introduces context analysis as an intermediary layer between simple pattern matching and final identification decisions. This intermediary component analyzes the surrounding context, data relationships, and patterns to validate whether identified information is truly sensitive, thereby improving accuracy without requiring complete system redesign.
2Reliability
If only pattern matching is used to identify sensitive information, then the processing speed is fast, but the reliability is low due to false identifications
Solution Approach 1:
The patent performs preliminary pattern matching and keyword searches to quickly identify potential sensitive information, then applies context analysis only to verify these pre-identified candidates. This preliminary action approach filters out obvious non-matches early, saving time while ensuring reliable identification through subsequent context verification of only the most likely candidates.
Solution Approach 2:
The patent applies different levels of analysis to different identified patterns based on their likelihood of being sensitive information. High-confidence pattern matches receive minimal verification, while ambiguous matches undergo more extensive context analysis. This local quality approach optimizes processing time by avoiding exhaustive analysis of clearly identifiable sensitive information.
3Object-affected harmful factors
If sensitive information is obfuscated without context analysis, then the obfuscation process is efficient, but the risk of accidental disclosure remains high
Solution Approach 1:
The patent implements a feedback mechanism where context analysis results feed back into the obfuscation decision process. The system continuously learns from identification accuracy and adjusts its context analysis depth and obfuscation strategies accordingly, improving disclosure risk reduction while maintaining efficiency through adaptive processing based on accumulated experience.
Data Source
AI summary
A system, method, and program product are presented for causing a processor of a computing device to receive content, determine a context of the content, and when the determined context is relevant for obfuscation, scan the content to identify information that matches, within the context, one of a plurality of data patterns indicative of being sensitive information. The processor further executes to assign a confidence value to the identifying process. When the sensitive information is identified with the confidence value above a confidence threshold, the processor executes to generate an obfuscated version of the sensitive information within the content, replace the sensitive information with the obfuscated version to form updated content, and output the updated content. The context may include at least one of a feature or a subject, a manner of use, and/or a determination of a user accessing, transmitting, or receiving the received content.