Data Collaboration Graph Redaction for Policy-Driven Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems struggle to consistently apply fine-grained distinctions in data sharing and safeguarding between different entities, such as governments, corporations, and individuals, due to complex internal policies and the difficulty in establishing categorical rules.
Innovation Solution
A graphical representation of data is displayed, allowing entities to apply multiple redaction criteria at varying levels of granularity, including access control, provenance, data object type, and media type, to identify portions for redaction, with feedback on redacted content, and export a machine-readable representation of the redacted graph.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If categorical rules are established for data sharing, then data collaboration efficiency is improved, but the ability to handle complex internal policy exceptions deteriorates
Solution Approach 1:
The patent segments data into fine-grained components with individual classification labels, allowing each data element to be independently evaluated against sharing rules. This segmentation enables the system to handle complex policy exceptions by applying different rules to different segments rather than treating all data uniformly, thus maintaining both efficiency and adaptability.
Solution Approach 2:
The patent implements dynamic redaction criteria that can be adjusted at multiple levels of granularity. The system allows entities to define redaction rules that adapt to different contexts, relationships, and policy requirements, enabling flexible handling of exceptions while maintaining consistent application of sharing rules across the data collaboration network.
2Reliability
If fine-grained redaction criteria are applied, then data security is improved, but system complexity increases
Solution Approach 1:
The patent applies redaction criteria preliminarily during data classification and labeling stages, before data sharing occurs. By pre-classifying data elements and pre-defining redaction rules based on classification labels, the system reduces security risks early in the process while avoiding the need for complex real-time evaluation during data exchange, thus balancing security with system simplicity.
3Manufacturing precision
If multiple redaction criteria are applied at varying granularities, then data integrity is improved, but processing time increases
Solution Approach 1:
The patent applies different redaction criteria at different levels of granularity based on local data characteristics and classification labels. Rather than uniformly applying all redaction criteria to all data, the system selectively applies appropriate criteria to specific data segments based on their classification, maintaining data integrity where needed while reducing unnecessary processing elsewhere, thus optimizing the balance between precision and processing time.
Data Source
AI summary
Techniques related to data collaboration between different entities are disclosed. In an embodiment, a graph may be displayed in a computer graphical user interface. The graph may include nodes and edges. Each node may represent a distinct data object. Each edge may represent one or more relationships between the two distinct data objects. Based on one or more redaction criteria, a portion of the graph may be identified to be redacted before the graph is exported. Display of the graph in the computer graphical user interface may be updated to remove display of the portion of the graph. After the updating, a request to export the graph may be received. Responsive to receiving the request, a machine-readable representation of a redacted graph may be exported.