Message Interception for Sensitive Data Access Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for preventing unauthorized disclosure of sensitive information through electronic messaging systems are inadequate, particularly in organizations, where accidental or intentional sharing of such information is difficult to detect and prevent.

Innovation Solution

A computer-implemented method intercepts electronic messages within an organization, applies Natural Language Processing (NLP) and sensitive information detection algorithms to identify sensitive elements, maps these elements to an organizational database using a glossary, and leverages activity monitoring software to determine recipient authorization, enabling or blocking message delivery based on database access permissions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If user-level and role-level permissions are implemented in computerized systems, then access control to resources is improved, but unauthorized disclosure through electronic messaging systems cannot be prevented

Engineering Contradiction:

Improveaccess controlVSAvoidmessaging system security

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system segments the messaging workflow into distinct phases: message composition, interception, analysis, authorization verification, and delivery. By intercepting messages before delivery and analyzing them separately from the main messaging flow, the system applies granular security controls to specific message contents and recipients without disrupting the overall messaging functionality.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary security system that acts as a mediator between the sender and recipient. This intermediary intercepts messages, analyzes their content for sensitive information, verifies recipient authorization through database queries, and determines whether to allow or block delivery. This intermediary layer provides messaging-specific security without modifying the underlying user-level permission structures.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Productivity

If electronic messaging systems are widely used within organizations, then communication efficiency is improved, but the risk of sensitive information disclosure increases

Engineering Contradiction:

Improvecommunication efficiencyVSAvoidsensitive information disclosure risk

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary security checks by intercepting and analyzing messages before they are delivered to recipients. Sensitive information detection algorithms scan message content in advance, and authorization verification queries the database beforehand to determine if the recipient has permission to receive the information. This preliminary action prevents unauthorized disclosures without requiring recall or retraction of messages after delivery.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements feedback mechanisms where the security analysis results directly influence message delivery decisions. When sensitive information is detected, the system queries the database to verify recipient authorization, and based on the verification result, either allows delivery or blocks the message. This feedback loop ensures that communication efficiency is maintained for authorized messages while preventing disclosures for unauthorized ones.

Inventive Principle:

Principle #23Feedback

3Speed

If messages are sent quickly through electronic messaging systems, then communication speed is improved, but the ability to recall or retract messages is reduced

Engineering Contradiction:

Improvemessage delivery speedVSAvoidmessage recall capability

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The system applies preliminary anti-action by preventing unauthorized messages from being delivered in the first place, rather than attempting to recall or retract them after delivery. The interception and analysis mechanism blocks sensitive information from reaching unauthorized recipients before the communication is complete, making recall unnecessary. This approach maintains communication speed while ensuring reliability through preventive security controls.

Inventive Principle:

Principle #9Preliminary anti-action

Data Source

PatentUS12596832B2Automated detection and prevention of disclosure of sensitive information via electronic messaging

Publication Date: 2026.04.07 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

A method including: intercepting an electronic message between a sender and a recipient who both belong to a same organization, before the electronic message is viewed by the recipient; utilizing an NLP algorithm, a sensitive information detection algorithm, and a glossary of the organization, to identify a sensitive element in the electronic message and to map a relevant term in the glossary to a field name in a database of the organization; generating a database query that is configured to retrieve the sensitive element from the database; attempting to execute the database query as the recipient of the electronic message, such that the attempted execution is inspected by activity monitoring software associated with the database; and based on a response from the activity monitoring software, deciding whether to enable the recipient to view the electronic message with or without the sensitive element included in it.