Distributed Sensitive Data Storage via Segmented Transmission

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional systems for entering, transmitting, and storing sensitive data are vulnerable to security attacks, including man-in-the-middle attacks and decryption threats due to centralized storage and transmission methods.

Innovation Solution

Implementing a distributed architecture that uses multiple contact methods with distinct communication protocols to enter, receive, and store sensitive data, breaking it into portions and storing each portion separately to prevent single-point failures and decryption risks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If sensitive data is transmitted electronically over conventional networks, then data transmission efficiency is improved, but security vulnerability increases due to man-in-the-middle attacks

Engineering Contradiction:
Improvedata transmission efficiencyVSAvoidsecurity vulnerability
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent segments sensitive data into multiple separate portions and transmits each portion through different communication channels and contact methods. This segmentation prevents attackers from intercepting complete sensitive data through man-in-the-middle attacks, as each channel carries only a fragment of the overall information.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system introduces an intermediary server that coordinates the collection of data portions from multiple contact methods. The server acts as a mediator that aggregates the segmented data portions without exposing the complete sensitive data during transmission, thereby reducing security vulnerabilities while maintaining transmission efficiency.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If sensitive data is stored in a central location, then data access efficiency is improved, but decryption risk increases due to centralized storage vulnerability

Engineering Contradiction:
Improvedata access efficiencyVSAvoiddecryption risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent divides sensitive data into multiple separate portions and stores each portion in different locations or contact methods rather than centralizing all data in one location. This segmentation reduces decryption risk because attackers would need to compromise multiple separate storage locations simultaneously, while the system can still efficiently access complete data by retrieving all portions through the intermediary server.

Inventive Principle:
Principle #1Segmentation

3Object-affected harmful factors

If multiple contact methods are used to disperse sensitive data, then security is improved, but system complexity increases

Engineering Contradiction:
Improvesecurity vulnerabilityVSAvoidsystem complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The intermediary server is designed with multi-functionality to handle various contact methods and communication protocols uniformly. It can receive data portions from different sources (email, text messages, phone calls, social media) and aggregate them into complete sensitive data, thereby managing the complexity of multiple contact methods through a single universal interface.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The intermediary server acts as a mediator that simplifies the system architecture by providing a single coordination point for collecting segmented data from multiple contact methods. This intermediary approach manages the inherent complexity of multi-channel data collection through centralized coordination, making the system more manageable despite using multiple contact methods.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11403422B2Systems and methods for the secured entry and storage of sensitive data
Publication Date: 2022.08.02 CAPITAL ONE SERVICES LLC
  • US11403422B2 patent drawing
  • US11403422B2 patent drawing
  • US11403422B2 patent drawing

AI summary

Embodiments of the present disclosure include systems and methods for securely entering, receiving, and storing sensitive data. A server system may determine if a request received from a user computing device communicatively coupled to the server triggers a requirement to receive sensitive data from the user computing device, generate a data structure for the sensitive data, designate a plurality of contact methods, determine a communication protocol for each of the designated plurality of contact methods, transmit a request for data unit information to the corresponding designated contact methods via the determined communication protocol for each data unit of the data structure, receive from each of the designated contact methods, the data unit information corresponding to the respective single data unit, and generate sensitive data by aggregating the received data unit information received from each of the designated contact methods.