Encrypted Contact Data Segmentation for Privacy Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional telecommunication devices do not adequately protect users' contact information privacy, as downloaded data is not encrypted and can be viewed in its entirety, leading to potential misuse, such as unauthorized contact attempts by former employees or contractors.
Innovation Solution
Implementing a server application that encrypts designated contact data and sets an expiration time for its usability on a user's device, with a client application decrypting the data only for contact initiation while preventing the decrypted information from being displayed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If contact information is stored in an electronic directory for easy access and communication initiation, then ease of operation is improved, but privacy and security are compromised as downloaded data can be viewed in its entirety
Solution Approach 1:
The patent segments contact information into two distinct parts: encrypted contact data (phone numbers, email addresses) that cannot be viewed, and unencrypted metadata (names, expiration dates) that can be displayed. This segmentation allows the system to maintain ease of operation by enabling users to initiate contacts through the interface while simultaneously protecting privacy by preventing unauthorized viewing of sensitive contact information.
Solution Approach 2:
The patent introduces an intermediary decryption mechanism that operates automatically in the background. When a user initiates contact, the system automatically decrypts the necessary contact data temporarily, performs the contact initiation, and then discards the decrypted data. This intermediary process shields users from directly viewing sensitive information while still enabling legitimate contact functions.
2Productivity
If contact information is made accessible to multiple users for business purposes, then productivity is improved, but security and control over data usage deteriorate
Solution Approach 1:
The patent implements dynamic control over contact data accessibility through time-based expiration mechanisms. Contact information can be downloaded and used by multiple users for business purposes during a specified time period, after which the data automatically expires and becomes unusable. This dynamic approach maintains productivity during the active period while ensuring security and control after expiration, preventing former employees or contractors from misusing contact information.
Solution Approach 2:
The patent applies preliminary action by pre-defining expiration parameters and usage restrictions before contact information is distributed. Administrators can set time limits, user-specific permissions, and usage conditions in advance. This preliminary configuration ensures that while multiple users can access contact data for business purposes, the system maintains reliability and control by automatically enforcing predetermined security policies.
3Ease of operation
If contact data is stored locally on devices for offline access, then ease of operation is improved, but loss of information control increases as users can view all downloaded data
Solution Approach 1:
The patent segments stored contact data into encrypted and unencrypted portions on local devices. Encrypted contact information (phone numbers, email addresses) remains protected and cannot be viewed or extracted, while unencrypted metadata (names, expiration dates) is displayed for user interaction. This segmentation enables offline access and ease of operation while preventing users from viewing or misusing the actual contact information.
Solution Approach 2:
The patent changes the state of contact data from fully visible to encrypted by default, with automatic decryption only during legitimate contact initiation processes. The system dynamically alters the visibility parameter of contact information based on operational context: encrypted at rest for security, temporarily decrypted during authorized use, and then re-encrypted or discarded. This parameter change maintains information control while enabling offline operational capability.
Data Source
AI summary
A client application allows a user of a telecommunication device to retrieve contact data of a particular individual from a server to initiate contact with the particular individual without viewing content designated as private by the particular individual. The retrieved contact data includes encrypted content and non-encrypted content. The telecommunication device sends a directory request to the server requesting contact data from an electronic directory stored on the server. If the directory request is validated by the server, the telecommunication device receives the requested contact data from the server. The telecommunication device also receives a decryption key and a key expiration parameter from the server. The client application executing on the telecommunication device can use the decryption key within a time period defined by the key expiration parameter to decrypt encrypted contacted data on the telecommunication device to initiate contact with the particular individual.