Secure Data Generation via Schema Randomization and Obfuscation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data security systems fail to effectively protect sensitive data from unauthorized access, especially when documents are generated and stored, as they do not adequately prevent leakage or loss despite implementing encryption and access control measures.
Innovation Solution
A system and method for secure data generation and transmission over a communication network that involves generating a key from a passphrase, retrieving and preprocessing raw data, randomizing data schema, and inserting an obfuscated query and access control lists into data packets for secure transmission, with mechanisms to detect and prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional encryption and access control measures are implemented, then data protection is improved, but unauthorized access risks remain high due to inadequate prevention mechanisms
Solution Approach 1:
The system performs preliminary actions by encrypting data before it is stored or transmitted, and by pre-configuring access control lists that define authorized users and their permission levels. The data is encrypted at rest and in transit, and access control rules are established beforehand to prevent unauthorized access attempts before they can succeed.
Solution Approach 2:
The system introduces an intermediary authentication mechanism that verifies user identities and permissions before allowing access to encrypted data. The access control list acts as an intermediary layer between the data and potential unauthorized access attempts, mediating the interaction by checking credentials and permissions before data disclosure.
2Adaptability or versatility
If data is shared between multiple users at different geographical regions, then collaboration is improved, but data leakage risk increases
Solution Approach 1:
The system applies local quality by implementing granular access control lists that assign specific permission levels (read, write, delete, print) to different users based on their roles and needs. Each user receives customized access rights tailored to their specific requirements, allowing collaborative data sharing while preventing unauthorized access or leakage by non-authorized users.
Solution Approach 2:
The system creates encrypted copies of data that can be selectively shared with authorized users. Instead of sharing original data, encrypted copies are generated and distributed to users who need access, with the ability to reconstruct the original data only with proper decryption keys and authorized access permissions.
3Reliability
If sensitive data is encrypted and access controlled, then security is improved, but data availability for authorized users may be reduced
Solution Approach 1:
The system implements self-service mechanisms where authorized users can independently access encrypted data using their credentials and permission levels. The access control system automatically authenticates users and grants access without requiring manual intervention, ensuring that data availability for authorized users is maintained while security remains enforced through automated verification.
Data Source
AI summary
Systems and methods for secure generation and transmission of data over a communication network are described herein. In one example, the method comprises receiving a query from the user and retrieving raw data from a data repository based on the received query. The method further comprises generating an obfuscated query and randomizing at least one of a table and a field of the raw data to produce a randomized schema. In one example, the method further comprises pre-processing the raw data based on the received query and inserting the preprocessed data into the randomized schema. Thereafter a data payload is generated by inserting the obfuscated query and the randomized schema into a data carrier, wherein the data payload is to be transferred to at least one client device for processing.