HCM Data Scrambling Module for Secure Tenant Transfer

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for data scrambling in Human Capital Management (HCM) systems are manual, complex, time-consuming, and expensive, leading to excessive exposure of sensitive data and inefficient tenant setup processes, which discourages organizations from implementing data protection measures.

Innovation Solution

A computer-implemented method for securely extracting and scrambling sensitive data from HCM systems involves creating a scrambling module configured to receive setup data, scramble data on-site within the HCM system, and upload it to a support tenant, while allowing user selection of scrambling techniques and automatic data transfer, ensuring data security and efficiency.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual data scrambling methods are used in HCM systems, then data security is improved, but time consumption and operational complexity increase significantly

Engineering Contradiction:
Improvedata securityVSAvoidtime consumption
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by automatically exporting data from the production tenant, scrambling it using configured methods, and importing it to the target tenant before users need the scrambled data. This eliminates manual intervention and reduces time consumption while maintaining data security through automated scrambling processes.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The scrambling system operates autonomously by automatically configuring itself with tenant metadata, selecting appropriate scrambling methods based on data sensitivity, executing the scrambling process, and managing data transfer between tenants without requiring manual user intervention at each step, thus reducing operational complexity and time consumption.

Inventive Principle:
Principle #25Self-service

2Reliability

If manual data scrambling is performed, then data protection is achieved, but operational complexity and cost increase

Engineering Contradiction:
Improvedata protectionVSAvoidoperational complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system automatically retrieves tenant metadata, configures scrambling parameters, selects appropriate scrambling methods based on data sensitivity, executes the scrambling process, and manages data transfer between tenants autonomously. This self-service capability eliminates manual configuration and operational steps, reducing operational complexity while maintaining robust data protection.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The scrambling system serves multiple functions within a single integrated process: it exports data from production tenants, scrambles data using multiple available methods (masking, scrambling, hashing), imports data to target tenants, and manages the entire workflow automatically. This multi-functionality reduces operational complexity by consolidating multiple manual tasks into one automated system.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Ease of manufacture

If data is exported for manual scrambling, then scrambling can be performed, but data exposure risk increases during transport and manipulation

Engineering Contradiction:
Improvescrambling capabilityVSAvoiddata exposure risk
Core Design Contradiction:
Ease of manufactureVSObject-affected harmful factors

Solution Approach 1:

The system introduces an automated scrambling intermediary process that acts as a secure mediator between the production tenant and target tenant. Instead of manually exporting and handling sensitive data, the automated system orchestrates the entire scrambling and transfer process through controlled interfaces, minimizing data exposure risk during transport and manipulation while maintaining scrambling capability.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The automated system performs all data handling operations autonomously without requiring manual export, manipulation, or import of sensitive data. The system automatically configures scrambling parameters, executes the scrambling process securely, and manages data transfer through controlled interfaces, eliminating the data exposure risks associated with manual data handling while preserving full scrambling functionality.

Inventive Principle:
Principle #25Self-service

4Reliability

If comprehensive data scrambling is implemented, then data security is improved, but implementation cost and time increase

Engineering Contradiction:
Improvedata securityVSAvoidimplementation efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system performs preliminary actions by automatically configuring scrambling parameters, selecting appropriate scrambling methods based on data sensitivity, and preparing the data transfer process before actual scrambling occurs. This preliminary automation eliminates manual setup time and accelerates implementation while maintaining comprehensive data security across all scrambled data.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system autonomously retrieves tenant metadata, configures scrambling parameters, selects appropriate scrambling methods, executes the scrambling process, and manages data transfer between tenants without manual intervention. This self-service capability implements comprehensive data scrambling automatically, improving implementation efficiency while maintaining high data security standards.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11184333B2Human capital management data transfer systems
Publication Date: 2021.11.23 INTECROWD LLC
  • US11184333B2 patent drawing
  • US11184333B2 patent drawing
  • US11184333B2 patent drawing

AI summary

A computer implemented method for securely extracting secure data from a human capital management (HCM) system, includes receiving setup data from a production tenant of the HCM system, wherein the setup data includes one or more field types describing what type of secure data is stored on the production tenant, creating a scrambling module based on the setup data that is configured to scramble the secure data based on scrambling settings, wherein the scrambling module is configured to upload and install onto the HCM system and to communicate with the production tenant to receive the secure data to scramble the secure data, and uploading the scrambling module to the HCM system.