Database Exclusion for Multi-Party Sensitive Data Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional multi-party access (MPA) environments in cloud computing lack effective protection mechanisms for sensitive personal information (SPI) shared among multiple client devices, leaving them vulnerable to unauthorized access and cyber threats.

Innovation Solution

A DBX cryptographic architecture employing a two-tier key hierarchy using symmetric and asymmetric keys, where data is encrypted with random symmetric keys and these keys are further encrypted using public keys associated with each client device, ensuring secure access and automatic destruction of encrypted data and keys upon completion or expiration of access periods.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If data is shared among multiple client devices in cloud computing, then accessibility and collaboration are improved, but security and vulnerability to unauthorized access deteriorate

Engineering Contradiction:

Improvemulti-party access capabilityVSAvoidvulnerability to unauthorized access

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent segments the encryption key into multiple parts, each held by different client devices. No single device possesses the complete key, preventing unauthorized access while enabling collaborative decryption when multiple parties cooperate. This directly addresses the contradiction by allowing multi-party access while eliminating the security vulnerability of centralized key storage.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent implements nested encryption where data is encrypted with a symmetric key, and that symmetric key is further encrypted with asymmetric keys associated with each client device. This layered approach enables secure multi-party access while protecting against unauthorized access at each encryption layer.

Inventive Principle:

Principle #7Nested doll (Nesting)

2Reliability

If strong encryption mechanisms are implemented to protect SPI, then security is improved, but system complexity and computational overhead worsen

Engineering Contradiction:

Improvedata securityVSAvoidencryption system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges symmetric and asymmetric encryption methods into a unified system. Symmetric encryption provides efficient data protection, while asymmetric encryption secures key distribution. This combination achieves strong security without excessive complexity by leveraging the strengths of both encryption types in complementary roles.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent introduces a symmetric key as an intermediary between the data and the asymmetric keys of multiple client devices. This intermediary simplifies the system by reducing the number of asymmetric key operations needed, as the symmetric key handles bulk data encryption while asymmetric keys only manage secure key exchange.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If data is encrypted multiple times with unique keys for each entity, then security against unauthorized access is improved, but processing time and computational resources worsen

Engineering Contradiction:

Improveprotection from unauthorized accessVSAvoidencryption and decryption time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent implements periodic key rotation where encryption keys are renewed at scheduled intervals. This approach maintains strong security through multiple unique keys while optimizing performance by establishing predictable key usage patterns and avoiding continuous key generation overhead.

Inventive Principle:

Principle #19Periodic action

Solution Approach 2:

The patent performs preliminary encryption of data with symmetric keys before distribution to multiple client devices. This preliminary action reduces subsequent processing time, as the data is already encrypted and only requires efficient symmetric decryption operations rather than computationally intensive asymmetric decryption for each access.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12192334B2Database exclusion (DBX) for multi-party access (MPA) to sensitive personal information (SPI)

Publication Date: 2025.01.07 WELLS FARGO BANK NA

AI summary

A system and method for protecting Sensitive Personal Information (SPI) from Multi-Party Access (MPA), including receiving a request for access to a data record, the request comprising an encrypted device identifier identifying the client device, encrypting the data record using a random symmetric key to generate an encrypted data record, encrypting the data record using a second symmetric key to generate a second encrypted data record, the second symmetric key being different from the random symmetric key, encrypting the random symmetric key to generate an encrypted symmetric key by using a public key associated with the client device or a key encryption key associated with the one or more processors, and transmitting a message comprising the encrypted symmetric key and the encrypted device identifier. The message causing the client device to access the data record using a database, the encrypted device identifier, and the encrypted symmetric key.