Network Traffic Management with Sensitive Data Hash Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network traffic management systems face challenges in securely and efficiently managing sensitive data across client-server architectures, particularly in preventing credential-stuffing attacks and maintaining confidentiality while ensuring high performance.
Innovation Solution
A method involving cryptographic transformations of sensitive data, where a portion of the hash value is transmitted to a sensitive data server for matching, allowing for secure identification of compromised credentials and dynamic adjustment of access policies without exposing sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic transformation of sensitive data is performed and portion is transmitted to sensitive data server for matching, then security is improved by reducing risk of data breaches and maintaining confidentiality, but device complexity increases due to additional cryptographic operations and server infrastructure
Solution Approach 1:
The patent segments the credential verification process into two parts: the sensitive data server stores only cryptographic hash values of credentials, while the network traffic management system performs the actual matching operations. This segmentation allows the sensitive data to remain isolated on the dedicated server while distributing the verification workload, thereby improving security without requiring complete system redesign.
Solution Approach 2:
The patent introduces cryptographic hash functions as an intermediary mechanism between the sensitive data server and the network traffic management system. Instead of directly comparing plain-text credentials, the system uses hash values as intermediaries that preserve security while enabling verification. This intermediary layer resolves the contradiction by allowing matching operations without exposing sensitive data.
2Productivity
If cryptographic hash functions are used for transforming sensitive data, then productivity is improved by enabling efficient matching operations, but use of energy increases due to computational requirements of cryptographic operations
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing cryptographic hash values of credentials on the sensitive data server before any verification is needed. This allows the network traffic management system to perform only lightweight hash comparison operations during actual verification, rather than performing complex cryptographic operations in real-time, thus improving performance while managing energy consumption.
Data Source
AI summary
Technology related to managing network traffic with sensitive data is disclosed. In one example, a method can include performing a cryptographic transformation of sensitive data of a request from a requestor for a resource. A portion of the cryptographic transformation of the sensitive data of the request can be transmitted to a sensitive data server. One or more possible matches to the cryptographic transformation of the sensitive data of the request can be received from the sensitive data server. A match to the cryptographic transformation can be identified within the one of the one or more possible matches. In response to identifying the match, an access policy for the requestor or the resource can be changed.