PII Security System with Automated Time Limits
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Personally identifiable information (PII) on computer systems is often left unsecured, making it accessible to unauthorized individuals, posing a risk to user privacy and security.
Innovation Solution
A method that identifies PII on a computer system, ranks its security risk, sets a time limit based on the rank, and performs security actions such as minimizing applications, clearing clipboard contents, or encrypting files when the time limit elapses to secure the information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If PII is left unsecured on the computer system, then user convenience and accessibility are improved, but security and privacy protection deteriorate
Solution Approach 1:
The system performs preliminary actions by automatically detecting PII presence and establishing time limits before unauthorized access can occur. The security module proactively identifies PII in clipboard, browser history, and application data, then sets automated time limits and security actions in advance, eliminating the need for manual user intervention while preventing unauthorized access.
Solution Approach 2:
The system implements self-service security by automatically detecting PII, ranking it by sensitivity, setting time limits, and executing security actions without requiring user awareness or manual intervention. The security module operates autonomously, monitoring system states and responding automatically to PII presence, thereby protecting users while maintaining convenience.
2Reliability
If automated security actions are implemented for PII, then security protection is improved, but system complexity increases
Solution Approach 1:
The security system is segmented into distinct functional modules: a detection module that identifies PII in different system locations, a ranking module that assesses sensitivity levels, a time limit setting module that establishes security durations, and an execution module that performs security actions. This segmentation allows each component to handle specific tasks independently, reducing overall system complexity while maintaining comprehensive security coverage.
Solution Approach 2:
The security module is designed as a universal system that handles multiple PII detection scenarios (clipboard, browser history, application data), multiple sensitivity levels, and multiple security actions (minimizing applications, clearing clipboard, encrypting files) through a single integrated framework. This multi-functionality reduces complexity by consolidating security operations into one manageable module rather than requiring separate systems for each function.
3Speed
If time limits are set for high-risk PII, then security response speed is improved, but user privacy and control are reduced
Solution Approach 1:
The system applies local quality by differentiating security measures based on the sensitivity and context of individual PII items. Rather than applying uniform security actions to all data, the ranking module assesses each PII item's sensitivity level and applies appropriate time limits and security actions accordingly. High-sensitivity PII receives shorter time limits and stricter protection, while less sensitive information receives proportionally lighter handling, thereby balancing security speed with privacy respect.
Data Source
AI summary
Methods, apparatus, and computer program products for securing personally identifiable information include: identifying, present on a computer system, personally identifiable information (‘PII’); ranking the PII for a user identifiable by the PII; setting a time limit for the PII based on the rank; and responsive to the time limit elapsing, performing one or more actions to secure the PII.