Decentralized Personal Data Access Control With Local Security Logging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing personal data management systems lack robust security measures to prevent unauthorized access and misuse, particularly in decentralized environments, while ensuring individual privacy and data integrity.
Innovation Solution
A decentralized system comprising two security devices that capture, anonymize, and store personal data locally, with a management system managing access rights and permissions, using a blockchain structure for logging access and storing anonymized data, and ensuring secure data transfer based on identity-based authorizations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If personal data is stored centrally for easy management, then access control is simplified, but security risks and unauthorized access increase
Solution Approach 1:
The system segments personal data storage across multiple decentralized security devices rather than centralizing it. Each security device maintains local storage of personal data, creating a distributed network where no single point of failure or unauthorized access compromises the entire system. This segmentation resolves the contradiction by improving security through distribution while maintaining manageable access control through the management system's ability to communicate with all segmented nodes.
Solution Approach 2:
The management system acts as an intermediary between security devices and users, coordinating access requests without storing personal data itself. It manages access rights and permissions by communicating with decentralized security devices, enabling centralized access control policy enforcement while personal data remains securely distributed across the network.
2Reliability
If personal data is stored locally at security devices, then security and privacy are improved, but access management becomes more complex
Solution Approach 1:
The management system provides universal access control functionality across all decentralized security devices through standardized communication protocols. It handles multiple functions including permission management, access coordination, and policy enforcement uniformly across the distributed network, simplifying the overall system despite local data storage.
3Stability of the object's composition
If access logs are stored locally at each security device, then data integrity is maintained, but storage requirements and system complexity increase
Solution Approach 1:
The system merges logging functionality across decentralized security devices into a coordinated networked system. While each device maintains local access logs for immediate data integrity, the logs are interconnected through the data network, allowing centralized verification and reducing redundant storage requirements across the distributed infrastructure.
Data Source
Figure 1
Figure 2
AI summary
The invention relates to a system 100 for managing personal data. The personal data is assigned to identities 106. The system 100 comprises a first security device 101 and a second security device 103. The two security devices 101 and 103 are spatially separated. The two security devices 101 and 103 are configured to capture personal data, assign it to identities 106, and store the captured personal data locally. The system 100 further includes a management system configured to manage permissions for the identities 106. The first security device 101 and the second security device 103 are each configured to locally log access to locally stored personal data. The invention further relates to a method for managing personal data and a computer program product.