Data Subject Access Request Processing with Malicious Source Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems face challenges in efficiently managing and responding to data subject access requests, particularly in verifying identities and differentiating between legitimate and malicious requests, which can lead to unauthorized access and increased operational costs.
Innovation Solution
A computer-implemented method that involves identifying requestors and sources, verifying identities through various techniques, and applying response fulfillment constraints, such as denying requests or charging processing fees, to manage data subject access requests effectively.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If identity verification techniques are applied to data subject access requests, then security against unauthorized access is improved, but processing time and operational complexity increase
Solution Approach 1:
The system performs preliminary identity verification by checking requestor information against stored data before processing the actual access request. This preliminary action filters out unauthorized requests early, improving security without significantly impacting processing time for legitimate requests.
Solution Approach 2:
The patent introduces an intermediary verification mechanism that mediates between the requestor and the personal data. This intermediary layer checks whether the requestor is authorized to access the data, providing security while maintaining efficient processing through automated comparison of requestor information with stored records.
2Reliability
If malicious requestors are identified and blocked, then security is improved, but the quantity of processed requests decreases
Solution Approach 1:
The system converts potentially harmful malicious requests into beneficial security improvements by identifying and blocking them. The verification process transforms what would be security threats into opportunities to strengthen the system's defense mechanisms, while legitimate requests continue to be fulfilled normally.
Solution Approach 2:
The patent implements a feedback mechanism where the system learns from each verification outcome. When malicious requestors are identified, this information feeds back into the system to improve future detection accuracy, allowing the system to maintain high security while minimizing impact on legitimate request processing.
3Loss of energy
If processing fees are charged for data subject access requests, then operational costs are reduced, but ease of operation for requestors deteriorates
Solution Approach 1:
The system applies different quality treatments to different requests based on local characteristics. Legitimate requests from verified requestors are processed without fees, while requests from unverified or potentially malicious sources may incur fees. This local differentiation maintains ease of operation for legitimate users while recovering costs from problematic requests.
Solution Approach 2:
The patent changes the parameter of cost assessment dynamically based on verification outcomes. Instead of a uniform fee structure, the system adjusts whether fees apply based on the requestor's verification status and the nature of the request, optimizing both cost recovery and user experience.
Data Source
AI summary
Responding to a data subject access request includes receiving the request and identifying the requestor and source. In response to identifying the requestor and source, a computer processor determines whether the data subject access request is subject to fulfillment constraints, including whether the requestor or source is malicious. If so, then the computer processor denies the request or requests a processing fee prior to fulfillment. If not, then the computer processor fulfills the request.