Decentralized Data Management via Operator-Client Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data management solutions combine multiple phases such as collection, storage, and consumption into a single task, granting unnecessary access authority to a single party, leading to data security vulnerabilities and privacy concerns.
Innovation Solution
A distributed data management system where an operator instructs a client to obtain data from a source, with the operator unable to directly access the source, receiving encrypted data from the client, and storing it in a data store for authorized consumers to decrypt, while the operator cannot read the stored data, decoupling data handling phases for enhanced security and privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a single party performs multiple data handling phases (collection, storage, consumption) for efficiency, then productivity is improved, but data security and privacy protection deteriorate due to unnecessary access authority
Solution Approach 1:
The patent segments the data handling process into distinct phases performed by different parties: data collection by first party, encrypted data transmission to second party for storage, and controlled decryption by third party for consumption. This segmentation eliminates the need for a single party to have access to plain text data throughout the entire process, thereby maintaining security while preserving efficiency.
Solution Approach 2:
The patent introduces an intermediary encryption mechanism where data is encrypted during transmission and storage phases. The encryption acts as an intermediary layer that allows the second party to handle and store data without being able to read it, thus enabling efficient data processing while maintaining security through cryptographic protection.
2Reliability
If data is encrypted during transmission and storage, then data security is improved, but device complexity increases due to multiple encryption keys and decryption processes
Solution Approach 1:
The patent applies different encryption qualities to different data phases: full encryption during transmission and storage, and controlled decryption only at the consumption phase by authorized third parties. This local differentiation of encryption intensity optimizes security where needed while reducing unnecessary complexity in other phases.
Solution Approach 2:
The patent changes the encryption parameter state dynamically: data is encrypted with specific keys during transmission and storage phases, then decrypted by authorized parties when consumption is needed. This parameter change approach allows the system to maintain high security during sensitive phases while enabling efficient data access when required.
Data Source
AI summary
Methods, systems, and apparatus, including computer programs encoded on computer storage media, for decentralized data management are provided. One of the methods includes: instructing, by an operator, a client to obtain data from a data source, wherein the operator is not allowed to directly obtain data from the data source; receiving, by the operator, encrypted data from the client, wherein the encrypted data is generated by the client based on the obtained data from the data source and an encryption key of an authorized data consumer; and storing, by the operator, the encrypted data into a data store for the authorized data consumer to access and decrypt, wherein the operator is not allowed to read the saved encrypted data from the data store.