Mediated Access Control for Sensitive Data Derivatives
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems fail to effectively mediate access to derivatives of sensitive data, lacking control over how authorized entities use the data and not addressing the need for access control to sensitive data derivatives.
Innovation Solution
Implementing an access control system that uses a secure computing container and key manager to grant access to derivatives of sensitive data based on intended use, employing a risk-based approach that assesses user and transaction risks, and employing onion-layered encryption to minimize privacy leakage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If conventional authentication systems grant access to sensitive data, then data availability is improved, but privacy control and usage constraint are lost
Solution Approach 1:
The patent introduces a mediator (the system that evaluates requests and manages keys) between data users and sensitive data. This mediator assesses whether a user should receive a key for computing on data, and controls the distribution of keys without requiring direct access to the sensitive data itself. The mediator thus enables privacy-controlled data processing while maintaining operational ease through automated decision-making.
Solution Approach 2:
The patent extracts only the necessary information (keys) from the sensitive data for authorized computations. Instead of providing full access to the data, the system extracts and provides only the computational keys needed to derive results, while the actual sensitive data remains protected and inaccessible to unauthorized users.
2Reliability
If access is granted to sensitive data, then data availability is improved, but the attack surface increases due to raw data exposure
Solution Approach 1:
The system uses a mediator that manages cryptographic keys as an intermediary layer between users and raw data. Users interact with the mediator to request computations, and the mediator provides keys that enable computation on encrypted data without ever exposing the raw data itself. This intermediary architecture maintains security by preventing direct raw data exposure while still enabling reliable data processing.
Solution Approach 2:
The patent implements nested encryption layers where data is encrypted multiple times with different keys at different levels. Each encryption layer can be independently managed and accessed. The nested structure allows the system to provide access to inner layers without exposing outer layers, thereby maintaining security while enabling progressive data access for authorized computations.
3Adaptability or versatility
If Mediated Privacy model provides access to sensitive data, then data availability for authorized entities is improved, but access control for data derivatives is not addressed
Solution Approach 1:
The patent implements a dynamic access control system that adapts to different data requests and computation types. The mediator evaluates each request dynamically, considering factors like data sensitivity, user credentials, and computation requirements. This dynamic approach enables flexible data usage for authorized entities while maintaining precise access control for data derivatives through real-time risk assessment and key management.
Data Source
AI summary
Access control systems are provided that mediate access to derivatives of sensitive data. A method is provided for processing a data request from a client, the data request comprising a client identifier and an indication of the intended use of the data, by receiving the data request from the client; providing the client identifier and indicated use to an access manager, wherein the access manager assesses a risk of providing access to the data for the indicated use; if the access manager grants access for the indicated use, receiving one or more keys with corresponding computing restrictions from the access manager; computing a result; and providing the result to the client, wherein the provided result comprises the derivative of sensitive data. The access manager grants the access for the indicated use, for example, based on a risk score.