Sensitive Data Display via Cryptogram Decryption and Privacy Controls
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data security tools provide generic results without specific details about sensitive data, requiring analysts to perform extra validation steps, making the process inefficient.
Innovation Solution
A system and method for securely collecting and displaying sensitive data using asymmetric key pairs for encryption and decryption, ensuring data privacy by encrypting sensitive data on a customer device, transmitting cryptograms to a service provider for storage, and decrypting them on an analyst device for display.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If existing data security tools are used to detect sensitive data, then data security visibility is improved, but analysts require extra validation steps due to generic results, making the process inefficient
Solution Approach 1:
The patent creates a decrypted copy of the sensitive data that can be displayed to analysts for validation. The system generates a decrypted version of the encrypted data object that contains the actual sensitive information, allowing analysts to view and validate the data without compromising the security of the original encrypted data stored in the data lake.
Solution Approach 2:
The patent introduces an intermediary decryption component that acts as a mediator between the encrypted data storage and the analyst. This intermediary decrypts the data object using a decryption key, allowing analysts to view the sensitive information for validation while the original encrypted data remains secure in the data lake.
2Reliability
If sensitive data is encrypted and stored externally, then data privacy control is improved, but data access and validation become more complex
Solution Approach 1:
The patent performs preliminary decryption of the data object before it needs to be viewed by analysts. The system proactively decrypts the encrypted data object using the decryption key, creating a decrypted version that can be easily accessed and validated by analysts without requiring them to navigate complex decryption processes.
Solution Approach 2:
The patent creates a decrypted copy of the sensitive data that can be easily accessed and validated by analysts. This copy contains the actual sensitive information in readable format, while the original encrypted data remains secure in the data lake, separating the complexity of encryption from the simplicity of data validation.
3Loss of information
If generic file-level reporting is used, then data security overview is improved, but specific sensitive data validation requires additional manual steps
Solution Approach 1:
The patent creates a decrypted copy of the sensitive data that can be displayed to analysts for validation. The system generates a decrypted version of the encrypted data object that contains the actual sensitive information, allowing analysts to view and validate the data without compromising the security of the original encrypted data stored in the data lake.
Solution Approach 2:
The patent implements a feedback mechanism where analysts can validate the decrypted sensitive data and provide feedback on its accuracy and relevance. This feedback loop allows the system to improve its detection and validation processes based on analyst input, reducing future validation time and improving overall efficiency.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems for collecting and securely transmitting and displaying sensitive data are described. In a described configuration, the system includes service provider software deployed to a customer endpoint for detecting sensitive data and encrypting the same to produce a cryptogram, at least one service provider server for receiving and storing cryptograms for later access, and a client deployed to a consumption device for requesting cryptograms from the at least one service provider server, transmitting the cryptogram to a customer decryption module for decryption, and for displaying the decrypted sensitive data via the consumption device. Corresponding methods and computer-readable media are also described.