Inference Control Processor for PII Exposure Risk Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data privacy is a significant concern in computer networks, particularly in data centers and databases, as Personally Identifiable Information (PII) can be inadvertently exposed through multiple queries, leading to inference channels that reveal sensitive information.
Innovation Solution
A method employing a security inference control processor to evaluate PII exposure risk by combining query results with an exposure storage log, determining exposure types, and selectively providing query results based on risk thresholds to prevent PII exposure, including adding query results to the log if the risk is below a threshold and modifying risks based on relationships and timestamps.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If query result data sets are provided to users without restriction, then data accessibility and user convenience are improved, but PII exposure risk increases
Solution Approach 1:
An exposure storage log acts as an intermediary between the query system and user data. The log accumulates historical query results and is used to evaluate PII exposure risk before providing new query results to users, thereby mediating between data accessibility and privacy protection
Solution Approach 2:
The system implements feedback by continuously evaluating PII exposure risk based on accumulated query results in the exposure storage log. This feedback mechanism dynamically adjusts whether to provide query results to users, creating a closed-loop system that balances accessibility with privacy protection
2Loss of information
If multiple query results are accumulated and combined, then data completeness and analytical value are improved, but inference channel creation increases PII exposure risk
Solution Approach 1:
The system performs preliminary evaluation of PII exposure risk by combining current query results with historical data in the exposure storage log before providing results to users. This preliminary action prevents inference channels from being created in the first place, rather than detecting them after formation
Solution Approach 2:
The exposure storage log, which could potentially create inference channels by accumulating data, is converted into a protective mechanism. The same accumulated data is used to evaluate and prevent PII exposure, turning the potential harm of data accumulation into a benefit for privacy protection
3Reliability
If PII exposure risk evaluation is performed for each query, then data privacy protection is improved, but system complexity and processing time increase
Solution Approach 1:
The exposure storage log serves multiple functions: it stores historical query results, evaluates PII exposure risk, and provides feedback for future queries. This multi-functionality reduces the need for separate dedicated components, thereby managing system complexity while maintaining strong privacy protection
Solution Approach 2:
The system merges the query processing function with the privacy evaluation function into a unified process. The exposure storage log integrates historical data with current queries in a single evaluation step, combining multiple operations into one cohesive mechanism that reduces overall system complexity
Data Source
AI summary
Data privacy is provided in a computer network using a security inference control processor of a network device in the computer network which receives a query from a user device through a network interface circuit. In response to the query, a query result data set is generated based on information in a database stored in a non-volatile data storage device. Personally Identifiable Information (PII) exposure risk associated with the query result data set is determined based on an evaluation of combining the query result data set with an exposure storage log that includes result data sets from past queries associated with the user. Based on the PII exposure risk, the query result data set is provided to the user, so as to refrain from providing the query result data set if the PII exposure risk is greater than a risk threshold. Related methods, devices, and computer program products are provided.