Encrypted Variant Data Objects for Secure Sensitive Data Querying
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in securely storing and querying sensitive data, such as personally identifiable information (PII), as storing encrypted data in the clear compromises security, and existing methods cannot facilitate fuzzy searches without decreasing data security.
Innovation Solution
The use of encrypted variant data objects, where sensitive data is tokenized and supplemented with variants, allowing for secure storage and fuzzy searching by linking tokenized sensitive data objects with tokenized variants through a common entity identifier, enabling secure and searchable data management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If sensitive data is stored in the clear to facilitate analytical services and fuzzy searches, then query functionality is improved, but security is compromised
Solution Approach 1:
The patent creates encrypted copy data objects that are cryptographic copies of the original sensitive data. These copies can be searched and queried without exposing the original plaintext data, allowing analytical services to function on encrypted representations while maintaining security. The copy data objects can be matched against query parameters through cryptographic operations without decryption.
Solution Approach 2:
The patent introduces encrypted copy data objects as an intermediary between the original sensitive data and query operations. This intermediary layer allows searching and analytical operations to be performed on encrypted data without direct access to plaintext, acting as a mediator that preserves security while enabling functionality.
2Reliability
If encrypted data is stored to maintain security, then data security is improved, but fuzzy search capability is lost
Solution Approach 1:
The patent transforms the search problem by changing parameters from plaintext matching to cryptographic matching. Instead of searching encrypted data directly, the system transforms query parameters into encrypted representations that can be matched against encrypted copy data objects using cryptographic operations, enabling fuzzy search functionality on encrypted data.
Solution Approach 2:
By creating encrypted copy data objects that preserve the structural and relational properties of the original data in encrypted form, the system enables fuzzy search operations to be performed on copies without accessing plaintext, maintaining both security and search capability.
3Reliability
If tokenized data is used to secure sensitive information, then security is improved, but query matching becomes difficult
Solution Approach 1:
The patent performs preliminary transformation of query parameters into encrypted representations before matching operations. By pre-processing queries to match the encrypted format of the stored copy data objects, the system simplifies the matching process while maintaining security, avoiding the need to decrypt data for comparison.
Data Source
AI summary
Various aspects of this disclosure provide digital data processing systems for using encrypted variant data objects to facilitate queries of sensitive data. In one example, a digital data processing system can receive sensitive data about an entity. The digital data processing system can create, in an identity data repository and from the sensitive data, a searchable secure entity data object for the entity. The searchable secure entity data object is usable for servicing a query regarding the entity. For instance, a transformed query parameter can be generated from a query parameter in the query. The query can be serviced by matching the transformed query parameter to tokenized variant data in the searchable secure entity data object and retrieving tokenized sensitive data from the searchable secure entity data object.