Identifier Translation Device Obfuscating Personal Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies are inadequate in securely protecting personal identifiers from being revealed when a modified personal identifier is intercepted or a database is breached or stolen, as they can be vulnerable to exhaustive searches, even with the use of salts and hash functions.
Innovation Solution
The implementation of an Identifier Translation Device that computes and uses obfuscated identifiers (ObfID) based on modified identifiers (ModID) with secret values, ensuring that the translation method is not hosted in the database and is protected using techniques like hash functions, block-ciphers, or homomorphic encryption, making it difficult for attackers to link information across databases.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hash functions with salts are used to protect identifiers, then the time required for attackers to perform exhaustive search increases, but the identifiers can still be revealed through database theft or interception
Solution Approach 1:
The patent introduces an intermediary translation system that converts identifiers through multiple layers (PubID -> ModID -> ObfID). The ObfID serves as a mediator between the public interface and the sensitive PubID, preventing direct exposure of the original identifier even when databases are compromised. This intermediary layer with secret values resolves the contradiction by maintaining reliability while managing complexity through structured transformation.
Solution Approach 2:
The system performs preliminary obfuscation of identifiers before storing them in databases. By pre-converting PubID to ObfID using secret values and storing only the obfuscated form, the system ensures that even if the database is stolen, the original identifiers cannot be retrieved without the secret values. This preliminary action protects identifiers proactively rather than reactively.
2Object-affected harmful factors
If secret values are used for obfuscation, then the security against database breaches improves, but the system complexity and operational difficulty increase
Solution Approach 1:
The translation system is designed to be self-service through automated conversion processes. The system automatically translates PubID to ModID and ObfID using embedded secret values and algorithms, eliminating the need for manual intervention in the obfuscation process. This self-service approach maintains high security while reducing operational complexity through automation.
Solution Approach 2:
The identifier protection system is segmented into distinct functional components: PubID generation, ModID translation, ObfID obfuscation, and secret value management. Each component operates independently with defined interfaces, making the system easier to operate and maintain despite the increased security requirements. The segmentation allows each part to be optimized separately.
3Loss of information
If identifiers are transformed into modified form, then direct access to original identifiers is prevented, but exhaustive search attacks remain feasible
Solution Approach 1:
The patent implements nested transformation where PubID is first transformed to ModID, then ModID is further transformed to ObfID using secret values. This nested structure (PubID -> ModID -> ObfID) creates multiple layers of protection, making exhaustive search increasingly difficult at each level while preventing direct access to the original identifier. The nested approach amplifies security without exposing the inner layers.
Solution Approach 2:
The system uses composite protection mechanisms combining multiple cryptographic techniques: hash functions, salt values, and secret value-based obfuscation. These different protection methods are composed together to create a multi-layered defense system that is more resistant to exhaustive search attacks than any single method alone, while maintaining the ability to retrieve original identifiers when needed.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A system and method of operating a database system to protect personal identifiers from being revealed. The system and method obfuscates personal identifiers using a secret value, storing in a database records containing the obfuscated personal identifier, storing the secret value in a identifier translation device, receiving at a request preparer a record request identifying a requested record using a non-obfuscated personal identifier, and operating the request preparer to direct the identifier translation device to translate the non-obfuscated personal identifier into an obfuscated personal identifier using the secret value stored in the identifier translation device and using the obfuscated personal identifier in a query to the database.