Sensitive Data Display via Cryptogram-Based Controlled Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data security tools provide generic results about sensitive data, requiring analysts to perform extra validation steps to ascertain the validity of matches, making the process inefficient and cumbersome.
Innovation Solution
A system and method for securely collecting, transmitting, and displaying sensitive data using asymmetric key pairs for encryption and decryption, ensuring data privacy and control through multiple layers of encryption and decryption across different devices and environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If sensitive data is displayed directly to analysts, then analysis efficiency is improved, but data security and privacy control deteriorate
Solution Approach 1:
The system segments the data access process into multiple stages: encrypted data is stored separately, decrypted only when needed, and automatically deleted after use. This segmentation allows analysts to access sensitive information for analysis while maintaining security controls throughout the data lifecycle.
Solution Approach 2:
The system performs preliminary encryption of sensitive data before storage and preliminary setup of decryption protocols before analysis needs arise. Data is prepared in advance with embedded decryption mechanisms, allowing rapid analysis when needed while maintaining security.
Solution Approach 3:
The system automatically discards (deletes) sensitive data from analyst devices after it has been viewed and used for analysis. The data is recovered (re-encrypted and re-stored) only when new analysis requests are made, ensuring data does not persist on analyst systems.
2Reliability
If generic data results are provided, then data security is maintained, but analyst validation efficiency deteriorates
Solution Approach 1:
The system applies different quality levels of data disclosure to different contexts: fully encrypted data for storage, selectively decrypted data for analysis, and automatically deleted data after use. This local quality approach allows security to be maintained where needed while enabling efficient analysis where appropriate.
3Reliability
If sensitive data is stored centrally, then data control is improved, but access efficiency for authorized users deteriorates
Solution Approach 1:
The system introduces decryption protocols and temporary local storage as intermediaries between central encrypted storage and analyst access needs. This intermediary layer maintains central control over the encrypted data while enabling efficient access through controlled decryption and temporary local caching.
Data Source
AI summary
Systems for collecting and securely transmitting and displaying sensitive data are described. In a described configuration, the system includes service provider software deployed to a customer endpoint for detecting sensitive data and encrypting the same to produce a cryptogram, at least one service provider server for receiving and storing cryptograms for later access, and a client deployed to a consumption device for requesting cryptograms from the at least one service provider server, transmitting the cryptogram to a customer decryption module for decryption, and for displaying the decrypted sensitive data via the consumption device. Corresponding methods and computer-readable media are also described.