Partial PII Token Access for Dynamic Anonymity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computerized information access control systems face challenges in managing personally identifying information (PII) by providing overly restrictive or permissive access, lacking temporal mechanisms, and failing to adapt to specific user queries, leading to inefficiencies and potential data leakage.
Innovation Solution
Implementing a system that uses machine learning and digital twinning to segment data into tokens, granting temporary access based on dynamic authorization and removing PII when specifications are not met, with a watchdog function to ensure secure data handling.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If traditional access control systems provide broad access to PII, then agents can efficiently access needed information, but data leakage risk increases
Solution Approach 1:
The system segments PII into multiple data fragments and distributes them across different tokens. Each token contains only a portion of the complete information, requiring multiple tokens to reconstruct full PII. This segmentation enables agents to access necessary data portions while preventing unauthorized reconstruction of complete sensitive information, thus balancing access efficiency with data protection.
Solution Approach 2:
The patent implements dynamic token generation and expiration mechanisms where access rights are temporarily granted for specific durations and automatically revoked. Tokens are dynamically created based on agent needs and automatically invalidated after use or expiration, enabling efficient temporary access while minimizing the window for potential data leakage.
2Object-affected harmful factors
If access control is highly restrictive to prevent data leakage, then data security improves, but agent productivity decreases
Solution Approach 1:
The system introduces tokens as intermediary objects between agents and PII. Tokens act as controlled access mediators that enable agents to retrieve necessary information without direct exposure to raw PII. The token mechanism facilitates efficient data access while maintaining security boundaries, allowing productivity without compromising data leakage prevention.
Solution Approach 2:
The patent changes access control parameters dynamically based on agent authorization levels, data sensitivity, and operational context. Access rights, token durations, and data portions are adjusted according to specific parameters, enabling restrictive security controls to adapt to different scenarios and maintain agent productivity while preventing data leakage.
3Speed
If PII is stored permanently on agent devices for quick access, then access speed improves, but anonymity and security are compromised
Solution Approach 1:
The system implements periodic token refreshment and expiration where access tokens are temporarily granted for specific time periods rather than permanently stored. Agents receive tokens for the duration needed to access PII, after which tokens automatically expire and are removed from devices. This periodic access mechanism enables fast temporary access while ensuring PII is not permanently retained, preserving anonymity and security.
4Measurement precision
If machine learning models access complete PII for training, then model accuracy improves, but data privacy is violated
Solution Approach 1:
The patent applies segmentation to training data by dividing PII into fragmented portions distributed across multiple tokens. Machine learning models can access and learn from these segmented data portions during training without accessing complete sensitive information. This enables model accuracy improvement through data access while maintaining privacy protection through continuous fragmentation and controlled token distribution.
Data Source
AI summary
Enhanced dynamic security with partial data access to preserve anonymity is provided herein. An example method comprises storing personally identifying information (PII) about an end user in a database, organizing data in the database into tokens, determining, upon receiving a request for the PII from an agent in communication with the end user, that the agent is authorized to access the PII, granting the agent temporary access to the PII, and removing the PII from a device associated with the agent.