Mock Data Dissemination for Data Breach Mitigation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Once confidential data is released or made available via the Internet due to a data breach, it is difficult to retrieve or protect, as perpetrators often post it on social media or darknet sites, making it challenging to mitigate damages.

Innovation Solution

Generating and disseminating modified data records, which include mock or benign data, that are more enticing than the original records, by applying obfuscation algorithms to make them appear valid but are actually incorrect, and posting them on the same Internet site where the breach occurred, to entice would-be acquirers and potentially identify their location or identity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If confidential data is released or made available via the Internet due to a data breach, then the data becomes accessible to perpetrators, but it becomes difficult to retrieve or protect the data

Engineering Contradiction:
Improvedata securityVSAvoidconfidential data exposure
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The system preemptively deploys mock data records before actual confidential data is exposed. When a data breach occurs, the mock data is already in place to immediately divert attackers, preventing them from obtaining real confidential information. This preliminary defensive action neutralizes the threat before harm can occur.

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

The system creates copies of actual data records but modifies them to contain mock or benign data instead of real confidential information. These copied records are then posted on the same Internet sites where attackers expect to find real data, providing a deceptive substitute that protects the original confidential data.

Inventive Principle:
Principle #26Copying

2Reliability

If mock data records are posted on the same Internet site as original data records, then acquirers are enticed away from original data, but the system complexity increases

Engineering Contradiction:
Improvedata protection effectivenessVSAvoiddata breach response system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs multiple functions through a unified process: it monitors for data breaches, generates mock data records, posts them on appropriate Internet sites, and tracks acquirer behavior. This multi-functional approach consolidates complex operations into a single coherent system that handles the entire data protection workflow.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system automatically responds to data breaches by generating and posting mock data records without requiring manual intervention. It self-monitors Internet sites for breaches, self-generates appropriate mock data, and self-posts to the correct locations, reducing operational complexity through automation.

Inventive Principle:
Principle #25Self-service

3Reliability

If modified data records with mock data are generated and disseminated, then actual data acquisition is minimized, but the loss of time for data retrieval increases

Engineering Contradiction:
Improvedata breach damage mitigationVSAvoidtime to retrieve confidential data
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system prepares mock data records in advance and positions them on Internet sites before actual data breaches occur. When a breach happens, the mock data is already in place to immediately divert attackers, eliminating any time delay in the protective response and allowing immediate damage mitigation.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system monitors and tracks acquirer behavior when they access mock data records. This feedback information helps refine and improve the mock data generation and deployment process, making the system more effective over time while maintaining rapid response capabilities.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11880472B2Generating and disseminating mock data for circumventing data security breaches
Publication Date: 2024.01.23 BANK OF AMERICA CORP
  • US11880472B2 patent drawing
  • US11880472B2 patent drawing
  • US11880472B2 patent drawing

AI summary

Modified data records, including mock data, are generated and disseminated in response to determining that a data breach has occurred resulting in the data records being released or otherwise made available at an Internet website. The modified data records are posted or otherwise made available at the same Internet site at which the original data records are posted or otherwise are available. The modified data records are made to be more enticing to a would-be acquirer of the data than the original data records by containing significantly more records than the original data records and/or be offered to the would-be acquirer at better terms.