Selective Patient Data Masking for Secure Terminal Display

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional systems fail to effectively protect sensitive information during data transmission in multi-computer networks, as encryption often compromises security by decrypting and displaying all data, making sensitive information accessible to unauthorized individuals.

Innovation Solution

The implementation of cryptographic mechanisms to selectively process and display sensitive information, either at the server side for outgoing transmissions or at the terminal side for incoming transmissions, using forms of cryptography to identify, encrypt, decrypt, and mask sensitive data, ensuring secure display only on authorized terminals.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If all data is encrypted during transmission and then decrypted for display at the receiving terminal, then data security during transmission is improved, but sensitive information becomes accessible to unauthorized individuals when displayed

Engineering Contradiction:

Improvedata security during transmissionVSAvoidunauthorized access to sensitive information

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent segments data into sensitive and non-sensitive portions, applying different processing methods to each. Sensitive information is identified through pattern recognition and handled separately through selective redaction or masking, while non-sensitive data undergoes standard encryption/decryption. This segmentation prevents complete decryption of sensitive information while maintaining necessary data utility.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent applies different quality levels of protection to different portions of data based on their sensitivity. Rather than uniform encryption/decryption, the system applies selective redaction, masking, or truncation only to sensitive fields (e.g., social security numbers, medical records) while leaving other data fully accessible. This local differentiation maintains security where needed while preserving data usability elsewhere.

Inventive Principle:

Principle #3Local quality

2Object-affected harmful factors

If sensitive information is completely encrypted and not displayed, then unauthorized access is prevented, but authorized personnel cannot access necessary information for care provision

Engineering Contradiction:

Improveunauthorized access preventionVSAvoidauthorized access for care providers

Core Design Contradiction:

Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The patent implements dynamic control over data display based on terminal authorization status. The system continuously evaluates whether the receiving terminal is authorized and adjusts the level of data disclosure accordingly. Authorized terminals receive appropriate information while unauthorized terminals receive redacted versions, creating a dynamic security model that adapts to each interaction context.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system incorporates feedback mechanisms where the receiving terminal's authorization status is communicated back to the transmitting system. This feedback loop enables the transmitting system to adjust the level of encryption and rediction applied to outgoing data based on the receiving terminal's credentials and authorization level, ensuring appropriate access control.

Inventive Principle:

Principle #23Feedback

3Productivity

If selective cryptographic processing is implemented to protect only sensitive information, then data utility is improved, but system complexity increases due to identification and selective processing requirements

Engineering Contradiction:

Improvedata utilityVSAvoidcryptographic processing system

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The patent implements self-service mechanisms where the data itself contains markers or metadata that identify sensitive portions. The cryptographic system automatically detects these markers and applies appropriate protection without requiring complex external analysis. This self-identifying approach reduces system complexity by leveraging information already present in the data structure.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent applies preliminary cryptographic processing and sensitivity classification to data before transmission occurs. By pre-identifying sensitive fields and applying appropriate redaction or encryption markers beforehand, the system reduces the computational complexity required during real-time transmission and display, as the heavy lifting of sensitivity analysis is completed in advance.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS11799837B1Systems and methods for protecting displayed patient information

Publication Date: 2023.10.24 TELETRACKING TECHNOLOGIES INC

AI summary

Computer-implemented systems and methods for digital content protection and security in multi-computer networks are provided. In one embodiment, a system for cryptographic digital content protection and security is disclosed. The system may include at least one processor, and a storage medium comprising instructions that, when executed, configure the at least one processor to determine specification of a computer terminal, determine a status of the computer terminal as a public terminal or a private terminal, identify sensitive information in a data transmission, generate output instructions associated with the sensitive information, and provide the data transmission and the output instructions to the computer terminal over a network.