Control-Sensitive Data Platform for Dynamic Regional Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data management systems fail to effectively handle dynamically changing access controls, leading to security vulnerabilities and loss of data relationships due to insufficient mechanisms for handling changes in access permissions, especially when dealing with a combination of sensitive and non-sensitive data.
Innovation Solution
A data management system that enables secure handling of sensitive and non-sensitive data by encoding sensitive data into tokens, allowing immediate access and manipulation of data upon changes in access controls, using cryptographic keys to decode data on demand, and adapting access permissions dynamically.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the administrator system transmits the whole dataset in response to a data access request, then the first device can access the data, but it introduces a delay in receiving access to the data
Solution Approach 1:
The dataset is segmented into multiple data structures, each containing a subset of the data. Instead of transmitting the entire dataset at once, the administrator system transmits individual data structures on-demand as the first device requests them. This segmentation allows for incremental data access, reducing the overall access delay while maintaining proper access control enforcement through selective transmission of only authorized data portions.
2Reliability
If the administrator system transmits only permitted portions of the data structure, then access control is maintained, but the first device loses the relationship between rows of manipulated data and entries associated with forbidden columns
Solution Approach 1:
The patent introduces data structure descriptors as intermediary elements that accompany the transmitted data structures. These descriptors contain metadata about the data relationships, including information about forbidden columns and their associations with data rows. This intermediary mechanism allows the first device to maintain awareness of data relationships even when accessing only permitted portions of the data, preserving referential integrity without violating access control policies.
3Reliability
If pre-existing systems prevent transfer of entire data structures containing sensitive data, then security is maintained, but non-sensitive columns are also deprived of transfer
Solution Approach 1:
The data structure is segmented at the column level, separating sensitive columns from non-sensitive columns. The administrator system evaluates access permissions for each column individually and transmits only the non-sensitive portions to the first device. This granular segmentation allows productive utilization of accessible data while maintaining security by excluding only the sensitive portions, thereby improving overall data utilization efficiency without compromising security.
4Reliability
If the system requires a request-response cycle for data access, then access control is enforced, but it creates delays when credentials or policies change
Solution Approach 1:
The system performs preliminary actions by establishing access control policies and credentials in advance, and by pre-evaluating which data structures and columns can be accessed by the first device. When credentials or policies change, the administrator system can efficiently update access permissions without requiring a complete re-transmission cycle. The data structure descriptors are also prepared in advance with relationship information, enabling rapid adaptation to changing access requirements while maintaining enforced control.
Data Source
AI summary
A network system to allow global usage of data while allowing regional jurisdictions control over sensitive data. Different jurisdictions may declare different types of data as sensitive data that is not to be discoverable by another party. The system may receive data that includes encoded data at a first device from a second device (e.g., associated with a remote datacenter). The system may store the data at the first device. In response to receiving a request from a third entity, the system may request a cryptographic key for decoding one or more data fields of the encoded data. Based on decoding the associated field data, the system may transmit a response to the data request that includes the decoded data.