OSI Layer 1 Parsing Function for Sensitive Data Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing security protocols for data transmission, such as encryption, are not foolproof and can be breached with sufficient time and effort, and sensitive data is often transmitted insecurely through channels like email, which lacks encryption.

Innovation Solution

A method and system that utilize a parsing function at the OSI Layer 1 or Layer 3 to scan for sensitive data using a list of 'hot' words, warning users and optionally preventing transmission without authorization, and employing a processor to manage data creation, storage, and transmission across a computer network.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If encryption techniques are used to protect sensitive data, then security is improved, but the system becomes vulnerable to determined attackers with sufficient time and resources

Engineering Contradiction:
ImprovesecurityVSAvoidcomplexity of security protocols
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary scanning of documents before transmission to detect sensitive data. The parsing function analyzes documents at OSI Layer 1 or Layer 3 to identify sensitive information patterns, and the system proactively prevents transmission before the data can be compromised, rather than relying solely on post-breach encryption responses

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary monitoring system that sits between the document creation application and the transmission channel. This intermediary parsing function intercepts documents, scans for sensitive data using pattern matching, and controls transmission based on detection results, acting as a mediator that adds security without requiring end-users to manage complex encryption protocols

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If sensitive data is transmitted through email for ease of use, then ease of operation is improved, but security is compromised due to lack of encryption

Engineering Contradiction:
Improveease of data transmissionVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system provides self-service security by automatically scanning documents for sensitive data without requiring user intervention. The parsing function autonomously detects sensitive information patterns, determines transmission safety, and controls the transmission process, allowing users to maintain simple email operations while the system handles security automatically in the background

Inventive Principle:
Principle #25Self-service

3Reliability

If monitoring is implemented to reduce sensitive data transmittal, then security is improved, but the system complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidcomplexity of monitoring system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The monitoring system is segmented into distinct functional components: a parsing function for pattern matching, a detection module for identifying sensitive data, and a control module for managing transmission. This segmentation allows each component to perform its specific function efficiently while maintaining overall system manageability and reducing complexity through modular design

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS7523498B2Method and system for monitoring personal computer documents for sensitive data
Publication Date: 2009.04.21 KYNDRYL INC
  • US7523498B2 patent drawing
  • US7523498B2 patent drawing
  • US7523498B2 patent drawing

AI summary

An apparatus, a method, and a computer program are provided for securing transmitted text. Once text has been produced by an application, the potential exists for an unintended third party to obtain sensitive data transmitted over computer networks. However, a parsing function can then operate either on an individual computer or on a network to scan text at an Open Systems Interconnection (OSI) Layer 1 to assist in the prevention of sensitive data transmission. By utilizing the parsing function, text can be scanned for potentially sensitive data by using a variety of techniques, such as a learning algorithm. The sensitive data can then be verified by a user, bypassed, or autostripped.