Data Security Tool Using Segmented Record Scrubbing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data security methods that send personal information to a server for scrubbing do not guarantee safety and integrity, as data can be intercepted or compromised during transport, and may not perfectly remove personal information.
Innovation Solution
Implementing an unconventional scrubbing process at the repository by dividing data records into portions, combining them to form chunks, and scrubbing these chunks before transmission, ensuring personal information is removed before leaving the repository.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is sent to a server for scrubbing, then personal information can be removed, but data may be intercepted or compromised during transport
Solution Approach 1:
The patent applies preliminary action by performing data scrubbing at the repository before data leaves the facility. This ensures personal information is removed in advance, eliminating the security risk of data interception during transport to an external scrubbing server.
Solution Approach 2:
The patent applies segmentation by dividing data records into multiple portions and combining them into chunks. This fragmentation ensures that even if some chunks are intercepted, the complete personal information cannot be reconstructed without all corresponding chunks.
2Reliability
If data is scrubbed at an external server, then personal information may be removed, but the scrubbing may not be perfect and personal information may still be exposed
Solution Approach 1:
By performing scrubbing operations at the repository rather than relying on external servers, the system ensures consistent and controlled removal of personal information before data leaves the secure environment, eliminating uncertainties about external scrubbing effectiveness.
3Reliability
If data records are divided and combined into chunks, then security is improved through fragmentation, but the processing complexity increases
Solution Approach 1:
The system divides data records into multiple portions and combines them into chunks with tracking metadata. This segmentation enables secure processing where each chunk can be independently handled while maintaining the ability to reconstruct complete records only when all chunks are properly assembled.
Solution Approach 2:
The patent introduces chunk metadata as an intermediary element that tracks and associates data portions with their original records. This mediator simplifies the complex process of managing fragmented data by providing a structured way to track, assemble, and process chunks without requiring complex coordination mechanisms.
Data Source
AI summary
An apparatus includes a memory that stores a plurality of records and a hardware processor. The processor receives a request for a first record and a second record of the plurality of records and divides, based on a type of the first record and a type of the second record, the first record into a first portion and a second portion and the second record into a third portion and a fourth portion. The processor also creates a first chunk using the first portion of the first record and the third portion of the second record and creates a second chunk using the second portion of the first record and the fourth portion of the second record. The processor further scrubs the first chunk to create a first message, scrubs the second chunk to create a second message, and communicates the first and second messages to an external device.