Policy Aware Data Redaction Matrix for Sensitivity Adaptation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data redaction methods often take a binary approach, either removing or not removing sensitive data, failing to adapt to the variability of different types of private data and their use cases, which complicates compliance with legal requirements and privacy protection.
Innovation Solution
A computer-implemented method and system for redacting data that generates a redaction matrix based on user-inputted identification scopes and disclosure impacts, applying a policy to complete the matrix, and using it to create an application template for appropriate redaction of data types, allowing for different redaction methods to be applied depending on the data's purpose and audience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a binary approach (remove or not remove) is used for data redaction, then the process is simple, but it fails to adapt to different types of private data and use cases
Solution Approach 1:
The patent applies parameter changes by transitioning from a binary redaction approach to a multi-parameter approach that considers data sensitivity levels, identification scopes, and disclosure impacts. The system dynamically adjusts redaction parameters based on combinations of these factors, enabling adaptive rediction for different data types and use cases while maintaining manageable complexity through structured parameter management.
2Reliability
If multiple redaction methods are applied based on sensitivity factors, then data protection effectiveness is improved, but the system complexity increases
Solution Approach 1:
The patent applies segmentation by dividing the redaction system into distinct components: sensitivity factor analysis, identification scope determination, disclosure impact assessment, and redaction method selection. Each component handles a specific aspect of the redaction process, which improves data protection effectiveness while managing system complexity through modular design and clear separation of concerns.
3Adaptability or versatility
If a comprehensive redaction matrix is created to cover all data types and scenarios, then coverage is improved, but the initial matrix becomes incomplete and requires policy-based completion
Solution Approach 1:
The patent applies preliminary action by pre-defining a comprehensive redaction matrix structure that covers all possible data types and scenarios. The matrix is initially populated with redaction methods based on available sensitivity factors, and then policy-based completion rules are applied to fill in remaining gaps. This approach ensures comprehensive coverage while managing complexity through systematic pre-planning and rule-based completion.
Data Source
AI summary
The present invention generally relates to systems and methods for document redaction. The disclosed techniques adapt to the needs of different levels of data sensitivity and different needs for disclosure or analysis by using pre-defined templates related to use cases, and mapping those to the relative sensitivity of private data types both in their natural form and after redaction by various redaction types. In this way, data is given the appropriate level of protection within the needs of a given use case.