Intermediate Module for Encrypted Data Processing in SaaS
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Hosted Software as a Service (SaaS) applications face security risks due to the need for unencrypted data to be exposed for manipulation, making user data vulnerable to security concerns during transmission and storage.
Innovation Solution
An intermediate module processes input text deterministically or non-deterministically, or a combination of both, to secure data transmission between a client device and a server, ensuring that only processed text is transmitted, thereby maintaining data integrity and security without exposing it to the application provider.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-affected harmful factors
If data is encrypted during transmission using SSL encryption, then data security during transit is improved, but data becomes exposed to the hosted application vendor upon decryption
Solution Approach 1:
The patent introduces an intermediate module positioned between the client and the hosted application that performs encryption and decryption operations. This intermediary handles the cryptographic operations locally, allowing data to remain encrypted during transmission while preventing the application provider from accessing the decrypted data. The intermediate module acts as a mediator that protects data from both external eavesdroppers and the application provider itself.
2Adaptability or versatility
If data is stored on remote servers for SaaS applications, then service accessibility is improved, but data privacy and integrity control is reduced
Solution Approach 1:
The intermediate module serves as a mediator that enables data to be stored on remote servers while maintaining privacy and integrity control. It performs encryption before data is sent to the server and decryption only when needed by the client, ensuring that the application provider never accesses the actual data. This allows SaaS accessibility while preserving data control through the intermediary's cryptographic operations.
Solution Approach 2:
The patent applies local quality by performing encryption and decryption operations locally at the client end through the intermediate module, rather than relying on server-side processing. This ensures that sensitive data remains encrypted during storage and transmission, with only the necessary decrypted data accessible to the application provider for its specific functional needs, thereby maintaining data privacy and integrity control.
3Ease of operation
If unencrypted data is made available for manipulation by the application provider, then ease of data processing is improved, but data vulnerability to security concerns increases
Solution Approach 1:
The intermediate module acts as a mediator that enables the application provider to manipulate data while maintaining encryption. It decrypts data only when needed for processing operations and re-encrypts it afterward, allowing ease of data processing without exposing vulnerable unencrypted data to the application provider. The intermediary handles the cryptographic operations transparently, enabling processing capability while preventing data vulnerability.
Data Source
AI summary
A method and system for securing data transmitted between a client device and a server by obtaining input text at an intermediate module, processing the input text to obtain processed text, deciding whether to transform the input text deterministically or non-deterministically, or a combination of deterministically and non-deterministically, and based on that decision, transforming the input text accordingly, using at least one key to obtain processed text, and transmitting the processed text to the server. Other embodiments and features of the invention include searching for processed text, allowing for sorting of processed text records by applying an order-preserving transformation, storing unabridged processed elements in a storage device managed by the intermediate module, providing a function by the intermediate module on the input data in lieu of the server, and processing the processed text so as to determine by the intermediate module a transformation applied by the server on input text.