Fingerprint Validation for Data Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing data security systems face substantial resource wastage due to the overhead of transmitting large files for content evaluation, which are often rejected, leading to bandwidth and processing intensity issues.

Innovation Solution

A system that extracts and transmits only content protection data, such as file hashes, to a central processor for verification, eliminating the need to send the entire file unless already authenticated, using a network driver to verify hashes without going through networking layers and distributing hash generation to remote systems.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If large data files are transmitted for content evaluation, then security verification can be performed, but network bandwidth is wasted and transmission overhead increases

Engineering Contradiction:
Improvesecurity verificationVSAvoidnetwork bandwidth
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent extracts only the essential identification elements (fingerprints, hashes, or other content protection data) from the complete data file. Instead of transmitting the entire file for security evaluation, the system transmits only these extracted identification elements, which are sufficient for security verification. This resolves the contradiction by maintaining security verification capability while eliminating the waste of network bandwidth that would occur with full file transmission.

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If complete data files are transmitted for security checking, then authentication can be performed, but processing resources are wasted when files are subsequently rejected

Engineering Contradiction:
ImproveauthenticationVSAvoidprocessing efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent performs preliminary security verification by transmitting and checking only the identification elements (fingerprints or hashes) before the complete data file is processed. This preliminary action using extracted identifiers allows the system to reject files early in the process based on their identification data alone, preventing waste of processing resources on files that would ultimately be rejected. The complete file is only transmitted and processed when the preliminary check on its identifier passes.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If file hashes are generated and verified at the central system, then content protection can be confirmed, but bandwidth and processor intensity requirements increase

Engineering Contradiction:
Improvecontent protection verificationVSAvoidprocessor intensity
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent uses cryptographic hashes (fingerprints) as copies or representations of the original data files. Instead of transmitting and processing the actual file contents, the system transmits and verifies these hash copies, which are computationally efficient representations. The hash verification at the central system confirms content protection without requiring intensive processing of the full file, thus resolving the contradiction between reliable verification and processor intensity.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS11258789B2System and method for fingerprint validation
Publication Date: 2022.02.22 FORCEPOINT LLC
  • US11258789B2 patent drawing

AI summary

A system for optimization of data transmission, comprising a content protection extraction system configured to operate on a remote processor and to extract content protection data associated with a data file and to transmit the content protection data to a central processor and a content protection confirmation system configured to operate on the central processor and to receive the content protection data and to verify whether the content protection data is associated with an authenticated data file.