Data Obfuscation via Biometric Transform and Fragmented Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data privacy solutions, such as encryption, may not provide sufficient security, and there is a need for enhanced methods to obfuscate data, especially considering regulatory requirements for data storage and the desire for decentralized systems.
Innovation Solution
A computer-implemented method that transforms numeric data into obfuscated fragments, which are stored separately across geographically separated systems, using transforms determined by user-associated data, such as biometric information, to enhance data privacy and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is used to protect data privacy, then data security is improved, but the security strength may not be sufficient and data access complexity increases
Solution Approach 1:
The patent segments encrypted data into multiple fragments and distributes them across different storage locations. Each fragment alone is insufficient to reconstruct the original data, enhancing security while allowing controlled access through fragment recombination only when authorized.
Solution Approach 2:
The patent introduces an intermediary decryption key or authorization mechanism that mediates between stored fragments and final data reconstruction. This intermediary controls access without requiring complex cryptographic operations at every access point, simplifying the data access process while maintaining security.
2Productivity
If data is stored in centralized systems, then data retrieval is efficient, but data privacy and regulatory compliance are compromised
Solution Approach 1:
The patent divides data into multiple fragments stored in different locations, maintaining efficient retrieval through distributed access while enhancing privacy protection. Each location holds only a portion, and no single location has access to complete data, satisfying regulatory requirements.
Solution Approach 2:
The patent applies different storage and access characteristics to different data fragments based on their sensitivity and access requirements. Critical fragments may be stored with higher security measures or in different geographic locations, optimizing both retrieval efficiency and privacy protection for each fragment.
3Reliability
If data is obfuscated into multiple fragments, then data security is enhanced, but data processing complexity increases
Solution Approach 1:
The patent performs preliminary organization and indexing of data fragments during the storage phase, creating a framework that simplifies later retrieval and processing. This preliminary structuring reduces the complexity of data processing during access operations.
Solution Approach 2:
The patent maintains metadata copies or indexes that track fragment locations and relationships without storing the actual data. These copies enable efficient processing and retrieval operations without requiring complex real-time analysis of the obfuscated data itself.
4Reliability
If user-associated data such as biometric information is used for transforms, then data privacy is enhanced, but system complexity and security requirements increase
Solution Approach 1:
The patent uses user-associated data as an intermediary key for fragment recombination rather than directly processing sensitive information. This intermediary approach enhances privacy by never storing or transmitting complete user data, while the associated complexity is managed through standardized biometric processing interfaces.
Solution Approach 2:
The patent enables users to control their own data access using their associated biometric information, eliminating the need for complex centralized authentication systems. Users independently verify and control fragment recombination, reducing system complexity while enhancing privacy through user sovereignty.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
There is provided a computer-implemented method of enhancing data privacy. One or more tensors of numeric data are determined, at a processor, in dependence on input data. A transform is determined in dependence on user-associated data, which may be user input or biometric data. Each of the one or more tensors of numeric data are transformed into at least two fragments of data by applying the transform. Each of the fragments of data obfuscates the numeric data. Each of the at least two fragments of data are stored separately at a respective geographically separated storage system.