Field-Level Encryption for Secure Mobile Document Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for systems and methods that enable the secure viewing and protection of sensitive information by designating multiple levels of access and securely retrieving and storing confidential data, especially in documents that contain a mix of sensitive and non-sensitive information, while allowing for the convenience of tangible hardcopies.
Innovation Solution
A method and system for field-level encryption of documents that involves receiving an image of an original document, identifying sensitive information fields, encrypting them, and generating a redacted hardcopy. The encrypted sensitive information can be decrypted using an authenticated mobile device, allowing the sensitive information to be overlayed on a visual representation of the document, ensuring confidentiality and convenience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If sensitive information is included in documents for convenient access and note-taking, then ease of operation is improved, but security and confidentiality are worsened due to risks of unauthorized forwarding, insecure storage, and inappropriate modification
Solution Approach 1:
The patent segments sensitive information from the rest of the document by applying field-level encryption to specific sensitive fields while leaving non-sensitive portions unencrypted. This allows the document to be divided into secure and accessible segments, enabling convenient note-taking on non-sensitive portions while protecting sensitive fields through encryption.
Solution Approach 2:
The patent applies different security qualities to different parts of the document. Sensitive fields are encrypted with cryptographic protection, while non-sensitive fields remain accessible in plain text. This local differentiation of security properties allows users to access and annotate non-sensitive portions conveniently while sensitive information remains protected.
2Reliability
If hard copies are redacted prior to printing to protect confidential information, then security is improved, but usability is worsened because users cannot access the needed confidential information
Solution Approach 1:
The patent introduces an intermediary decryption mechanism that bridges the gap between redacted hard copies and accessible information. A mobile device with decryption capabilities acts as an intermediary, allowing users to view encrypted sensitive fields on the hard copy by providing authentication credentials, thus mediating between security protection and information accessibility.
Solution Approach 2:
The patent applies field-level encryption to sensitive fields before printing the hard copy. This preliminary encryption action ensures that sensitive information is protected on the physical document itself, while authorized users can later decrypt and view the information using their mobile devices, eliminating the need for unredacted copies.
3Ease of operation
If unredacted hard copies are printed for accessing confidential information, then ease of operation is improved, but security is worsened because the copies may be lost or stolen
Solution Approach 1:
The patent segments the document into encrypted sensitive fields and unencrypted non-sensitive fields on the hard copy. This segmentation allows the document to be printed in a form that appears redacted (protecting against casual viewing of lost copies) while still enabling authorized access to sensitive information through the decryption mechanism on mobile devices.
Solution Approach 2:
The patent changes the security parameter of the hard copy from completely unencrypted to field-level encrypted. This parameter change transforms the hard copy into a secure carrier that protects sensitive information through encryption while maintaining the ability to access the information through authenticated decryption on mobile devices.
4Reliability
If field-level encryption is applied to sensitive information fields, then security is improved, but device complexity is worsened due to the need for encryption and decryption mechanisms
Solution Approach 1:
The patent implements self-service encryption and decryption where the mobile device itself performs the cryptographic operations using stored credentials. The system automatically identifies sensitive fields and applies encryption, and the mobile device autonomously decrypts information when authentication is provided, reducing the need for complex external security infrastructure.
Solution Approach 2:
The patent makes the mobile device multi-functional by combining document viewing, encryption decryption, and authentication capabilities in a single device. This universality consolidates multiple security functions into one platform, reducing overall system complexity while maintaining robust security through field-level encryption.
Data Source
AI summary
A method and system are disclosed for field level encryption of a document that provides a hardcopy having redacted sensitive information fields with multiple levels of access and an augmented reality view of the hardcopy displaying the unredacted sensitive information fields. Identification of the sensitive information fields may be accomplished via highlight color, user designation, or linguistic analysis. The identified fields are encrypted and may be stored separately, embedded in place, or embedded in a two-dimensional glyph. This information may be stored in association with a device identification of an authenticated mobile device and a document identification. A redacted hardcopy of the original document is output. A mobile device captures an image of the redacted hardcopy, decrypts the encrypted sensitive information fields, and generates an augmented reality view of the hardcopy with the previously redacted sensitive information fields visible on the display of the mobile device.