Document Management System Data Masking for Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional document management systems fail to securely restrict access to sensitive data, allowing unauthorized users to view or reverse-engineer sensitive information.

Innovation Solution

A document management system that secures documents by applying a security policy to restrict access and masks sensitive data with a masking element, preventing unauthorized access while allowing users to view non-sensitive data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If sensitive data is completely hidden from unauthorized users, then data security is improved, but users cannot access any information in the document including non-sensitive data

Engineering Contradiction:

Improvedata securityVSAvoiddata accessibility

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The document data is segmented into sensitive and non-sensitive portions. The system applies different access controls to different segments: non-sensitive data remains accessible to authorized users while sensitive data is masked or hidden, allowing partial access rather than complete restriction or complete access

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Different security properties are applied to different parts of the document. Non-sensitive fields maintain normal visibility and access, while sensitive fields are selectively masked or hidden based on user permissions, creating local variations in data quality and accessibility

Inventive Principle:

Principle #3Local quality

2Reliability

If all data in a document is masked to protect sensitive information, then data security is improved, but users cannot view any document content reducing system usability

Engineering Contradiction:

Improvedata securityVSAvoidsystem usability

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

Instead of applying masking to all data (excessive action), the system applies masking only to sensitive portions (partial action). This selective approach maintains security for critical information while preserving usability by leaving non-sensitive data visible and accessible

Inventive Principle:

Principle #16Partial or excessive action

3Reliability

If complete access control is implemented to prevent unauthorized viewing, then data security is improved, but users cannot perform legitimate business operations requiring document access

Engineering Contradiction:

Improvedata securityVSAvoidbusiness operation flexibility

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system dynamically adjusts data visibility based on user roles, permissions, and specific document contexts. Access control is not static but adapts to different users and situations, allowing flexible business operations while maintaining security through role-based access and selective masking

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS11232230B1Data security for a document management system

Publication Date: 2022.01.25 TEKION CORP

AI summary

A document management system manages documents of an enterprise. The documents are managed in a secure manner such that access to entries included in the documents may be restricted according to a security policy associated with the documents. The document management system may secure documents such that entries are still provided to users that request the documents, but sensitive data included in the entries is masked according to the security policies for the documents.