Multitenant Document Editing Engine Anonymization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional document management software in multitenant environments is agnostic to document content, leading to incomplete or missing clauses, terms, and line items during document lifecycle stages, and lacks efficient data sharing and anonymization mechanisms.

Innovation Solution

A document editing engine with machine learning models that provides content recommendations by training on existing documents and external intelligence, anonymizes data from local libraries, and stores it in a global library for multitenant access, ensuring secure and intelligent content inclusion/exclusion decisions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If data from local data stores of multiple tenants is shared in a multitenant environment, then document management efficiency and intelligence are improved through access to broader data, but data security and privacy are worsened due to exposure of sensitive information

Engineering Contradiction:
Improvedocument management efficiencyVSAvoiddata security risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an anonymization service as an intermediary between tenants' local data stores and the shared global data store. This service automatically anonymizes sensitive information before data is made available to other tenants, allowing efficient document management through shared data while protecting original data security and privacy through automated redaction of personally identifiable information and confidential data

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent creates anonymized copies of original document data and stores them in a global data store accessible to multiple tenants. These copies contain all necessary document intelligence and structure for efficient management but have sensitive information removed or generalized. The original data remains secure in local stores while the copies enable cross-tenant productivity improvements

Inventive Principle:
Principle #26Copying

2Manufacturing precision

If specific detailed information is retained in document data, then document accuracy and completeness are improved, but anonymization effectiveness is worsened making it harder to protect privacy

Engineering Contradiction:
Improvedocument accuracyVSAvoidanonymization effectiveness
Core Design Contradiction:
Manufacturing precisionVSReliability

Solution Approach 1:

The patent applies different levels of anonymization to different parts of the document data based on their sensitivity and importance. Critical structured data elements necessary for document accuracy (such as document type, clauses, terms, line items) are preserved in detail, while personally identifiable information and confidential fields are completely removed or generalized. This selective approach maintains document functionality while ensuring privacy protection

Inventive Principle:
Principle #3Local quality

3Object-affected harmful factors

If data is anonymized to protect privacy, then data security is improved, but data utility is worsened by loss of specific information needed for accurate document management

Engineering Contradiction:
Improvedata securityVSAvoiddata utility
Core Design Contradiction:
Object-affected harmful factorsVSLoss of information

Solution Approach 1:

The patent changes the parameters of data elements during anonymization by transforming specific identifying values into generalized categories. For example, specific company names are replaced with industry categories, specific personal names are replaced with role titles, and specific dates are replaced with time periods. This parameter transformation maintains the structural and functional utility of the data for document management while removing the ability to identify specific individuals or organizations

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS10783274B2Anonymized data sharing for multitenant document editing engine
Publication Date: 2020.09.22 SAP SE
  • US10783274B2 patent drawing
  • US10783274B2 patent drawing
  • US10783274B2 patent drawing

AI summary

A method for anonymized data sharing for a multitenant document editing engine is provided. The method may include retrieving, by at least querying a local data store of a first tenant in a multitenant environment, data including a first content from a first document associated with the first tenant. The data may be anonymized. The anonymization of the data may include generating a second content by at least replacing a first information included in the first content with a second information. A recommendation to include and/or exclude the second content from a second document associated with the second tenant may be provided to a first client associated with a second tenant in the multitenant environment. Related systems and articles of manufacture, including computer program products, are also provided.