Data Disclosure Apparatus Purpose-Compliant Query Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data disclosure methods fail to ensure that data is only accessed for its intended purpose and do not adequately protect against unauthorized use, even when encrypted.
Innovation Solution
A data disclosure apparatus that uses a computation device to check user queries against predetermined rules, encrypts results using public keys corresponding to private keys held by users, and provides encrypted data only to authorized users, ensuring data is used solely for its intended purpose.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is disclosed to users, then data accessibility is improved, but data security and control over unauthorized use deteriorate
Solution Approach 1:
The patent introduces an intermediary evaluation mechanism between data disclosure and user access. The system evaluates whether a user's reference purpose complies with predetermined rules before allowing data access. This intermediary layer ensures that data is only disclosed when the intended use aligns with security policies, resolving the contradiction between accessibility and security.
Solution Approach 2:
The patent changes the parameter of data access control from binary (allowed/denied) to conditional (allowed only when purpose compliance is verified). By introducing purpose compliance as a variable parameter, the system dynamically adjusts access permissions based on the user's intended use, enabling both accessibility for legitimate purposes and security for unauthorized access prevention.
2Reliability
If data is encrypted with user-specific keys, then data protection against leakage is improved, but system complexity increases
Solution Approach 1:
The patent implements self-service through user-specific encryption keys. Each user receives their own private key and public key pair, allowing them to independently encrypt and decrypt data without requiring system administrator intervention. This self-service approach strengthens data protection while distributing the complexity management to individual users rather than centralizing it.
Solution Approach 2:
The patent segments the encryption keys into separate user-specific key pairs distributed across different users. Instead of using a single centralized encryption mechanism, the system divides encryption responsibilities into multiple independent key segments, each controlled by individual users. This segmentation improves data protection by limiting the impact of key compromise while distributing complexity across multiple manageable units.
3Reliability
If the system checks query compliance against predetermined rules, then unauthorized use prevention is improved, but processing time increases
Solution Approach 1:
The patent applies preliminary action by establishing and maintaining a database of predetermined reference purposes and their associated compliance rules before actual data disclosure occurs. The system pre-processes and stores these rules in advance, enabling rapid retrieval and evaluation during query processing. This preliminary preparation reduces the time needed for compliance checking during actual data access operations.
Data Source
AI summary
Data is disclosed only when a utilization purpose is met, and a risk that the disclosed data is referenced for other purposes is reduced. A data disclosure apparatus discloses data in response to a query from a user, and includes at least one computation device, at least one memory resource, and at least one storage device. The computation device receives the query, checks whether or not the query complies with a predetermined rule, searches table data as query processing responding to the query to acquire a result of query execution when the query is confirmed to comply with the predetermined rule, encrypts the result of query execution using a public key corresponding to a private key held by the user, and provides the encrypted result of query execution to the user.