Personal Data Sharing With Encrypted Values and Unencrypted Attributes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack secure and efficient methods for transferring personal data between different computer devices while ensuring user consent and control, and existing encryption methods compromise the ability of computer systems to evaluate and analyze encrypted data effectively.
Innovation Solution
A personal data sharing platform that individually encrypts data values within attribute-value pairs, allowing secure transfer and evaluation of encrypted personal data while maintaining user consent and control, using a data structure that keeps attributes unencrypted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption methods are used to secure personal data transfer, then data security is improved, but the ability of computer systems to evaluate and analyze the encrypted data is compromised
Solution Approach 1:
The patent segments personal data into attribute-value pairs where only the values are encrypted while attributes remain unencrypted. This segmentation allows the system to maintain data security through encryption of sensitive values while preserving the ability to evaluate and analyze data based on unencrypted attributes such as data type, category, and metadata.
Solution Approach 2:
The patent applies different encryption qualities to different parts of the data structure. Specifically, personal data values are individually encrypted with strong encryption, while attributes and metadata remain unencrypted or use lighter encryption. This local differentiation enables both security for sensitive information and evaluability for data classification and matching.
2Reliability
If individual encryption of data values is implemented, then encryption security is enhanced, but computational resources required for decryption increase
Solution Approach 1:
The patent extracts only the necessary personal data values for encryption while leaving attributes and metadata unencrypted. This extraction approach minimizes the amount of data requiring computationally intensive encryption and decryption operations, reducing energy consumption while maintaining security for the most sensitive portions of the data.
Solution Approach 2:
The patent applies partial encryption only to data values that require security protection, rather than encrypting entire data packets or all fields. This selective approach uses just enough encryption to protect personal information while avoiding the excessive computational overhead of encrypting non-sensitive attributes and metadata.
3Reliability
If comprehensive data validation is performed to ensure data packets meet specified conditions, then data integrity is improved, but processing time increases
Solution Approach 1:
The patent performs preliminary validation of data packets against specified conditions and data packet types before storing or transferring the encrypted data. By validating data structure, attributes, and compliance with predetermined schemas in advance, the system ensures data integrity while avoiding time-consuming validation during decryption or data retrieval operations.
Data Source
AI summary
An indication that data packets of personal data that correspond to data packet types for data categories are approved for transfer between user accounts via the personal data sharing platform is provided. A first data packet identifying first personal data that is related to a first user of the first user account is received. The first data packet includes first personal data values that correspond to first attributes specified by a first data packet type and that have been individually encrypted at first user account. Whether the first data packet satisfies a condition that the first data packet include data values for each of the first attributes specified by the first data packet type for a first data category is determined. Responsive to determining that the first data packet satisfies the condition, the individually encrypted first personal data values and the corresponding first attributes are stored at a data store.