Digital Document Security via Data Segmentation and Link Values
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securing digital documents either render them entirely unusable through encryption or fail to provide a simple, automated way to restrict access to sensitive information, making it inconvenient to index or freely distribute documents while maintaining access control.
Innovation Solution
A computer-implemented method that generates a link value for sensitive data, stores it in a secure storage unit with access rules, and creates an updated document version with a display value in its place, allowing authorized access to the sensitive data upon request.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is applied to the full document, then access control to sensitive information is achieved, but the document becomes entirely unusable and cannot be indexed or freely distributed
Solution Approach 1:
The patent segments the document into sensitive data and non-sensitive data. Only the sensitive data is removed and replaced with display values, while the rest of the document remains accessible and indexable. This allows the document to be freely distributed and used while maintaining security for specific information.
Solution Approach 2:
The patent extracts sensitive data from the document and stores it separately in a secure storage unit. The sensitive data is replaced with display values in the document, allowing the document to be distributed without the sensitive information while maintaining the ability to access it securely when needed.
2Reliability
If redaction is applied to the document, then access to sensitive information is restricted, but there is no simple or automated means to recover the sensitive information
Solution Approach 1:
The patent performs preliminary action by storing the sensitive data in a secure storage unit before redaction. The secure storage unit maintains the original sensitive data alongside the redacted document, enabling automated recovery of sensitive information when authorized users need it, without requiring manual intervention.
3Reliability
If encryption key control is implemented, then access to encrypted data is secured, but significant controls over key distribution and control are required
Solution Approach 1:
The patent introduces a secure storage unit as an intermediary between the document and the sensitive data. This intermediary manages the security and access control mechanisms, eliminating the need for complex key distribution and control systems. The secure storage unit handles authentication and data retrieval automatically.
Data Source
AI summary
Provided is a method for securing a digital document. An initial version of the digital document contains a set of data. The method comprises: generating a link value by applying a preset function to a subset of the set of data, allocating the link value to a target data belonging to the set of data and storing an entry comprising the target data in a secure storage unit, the target data being reachable in the secure storage unit through the link value, the secure storage unit being configured to use access rules for authorizing or denying a request initiated by a user and aiming at accessing the target data comprised in said entry, and generating an updated version of the digital document by removing the target data from the initial version of the digital document.