Multi-Layer Encryption for Data Privacy Protection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The risk of user privacy data leakage is increased when service platforms associate user identity data with service data, particularly in scenarios like smart healthcare where sensitive information is shared.

Innovation Solution

A data privacy protection method based on multi-layer encryption is implemented, where each client in a specified order encrypts its service data using public keys from subsequent clients, ensuring that only the final client can decrypt and send aggregated service data to the service platform, thereby preventing data leakage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the service platform associates user identity data with service data to authenticate user identity, then user identity verification is improved, but user privacy security deteriorates

Engineering Contradiction:
Improveuser identity verificationVSAvoidprivacy data leakage risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The service data transmission process is segmented into multiple layers of encryption. Each client encrypts its service data independently using its own private key and the service platform's public key, creating separate encrypted data segments that cannot be traced back to individual users by the service platform

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A multi-layer encryption mechanism is introduced as an intermediary between user identity data and service data. The encryption layers act as a mediator that prevents direct association between user identity and service data, allowing the service platform to verify service authenticity without accessing user identity information

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If multi-layer encryption is applied to service data to protect user privacy, then privacy security is improved, but data processing complexity deteriorates

Engineering Contradiction:
Improveprivacy data leakage riskVSAvoidencryption processing complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

Each client performs preliminary encryption of its service data using its private key before transmission. This preliminary action ensures that data is already encrypted when received by the service platform, simplifying the overall processing by eliminating the need for the platform to implement complex decryption and re-encryption workflows

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The encryption mechanism uses standard asymmetric encryption algorithms (RSA, ECC) that are universally supported by cryptographic libraries. This multi-functionality allows the system to leverage existing, well-tested encryption implementations rather than developing custom complex encryption logic

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12284165B2Data privacy protection method based on multi-layer encryption
Publication Date: 2025.04.22 HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO LTD
  • US12284165B2 patent drawing
  • US12284165B2 patent drawing
  • US12284165B2 patent drawing

AI summary

A data privacy protection method based on multi-layer encryption is disclosed, which is related to the technical field of network technologies. The method includes: by an initial client, encrypting service data based on a public key set to obtain first to-be-processed data, and sending the first to-be-processed data to a next client; by an intermediate client, obtaining the first to-be-processed data sent by a previous client, encrypting service data based on a public key set to obtain second encrypted data, and sending second to-be-processed data and the second encrypted data to a next client; by a final client, obtaining the second to-be-processed data and the second encrypted data sent by a previous client, decrypting the second to-be-processed data and the second encrypted data based on its own private key, to obtain service data of each of other clients other than the final client itself, and sending the service data of all of the clients in a data privacy protection system to a preset service platform. The embodiments of the present application are applied to reduce the risk of user's privacy data leakage.