Private Display Zone Segmentation for Sensitive Data Access Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In environments where sensitive information is displayed on computer monitors, such as in healthcare settings, there is a challenge in restricting access to authorized users only, especially as digital medical records become more prevalent, and laws like HIPAA require stringent privacy protection to avoid penalties.

Innovation Solution

A computer system and method that selectively displays or transmits data based on the access level of the requesting device, using a data request module, device configuration module, and restriction level module to compare and match the access restrictions, ensuring that sensitive information is only displayed on approved devices with appropriate privacy levels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If sensitive information is displayed on computer monitors in public or semi-private settings, then accessibility and usability are improved, but privacy protection and security deteriorate

Engineering Contradiction:
Improveaccessibility of informationVSAvoidprivacy exposure
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent applies local quality by creating different display zones with different privacy characteristics. The private display portion uses technologies such as private viewing technology, directional viewing technology, or anti-cheat technology to ensure that only the authorized user can view sensitive information, while other areas remain visible to others. This allows sensitive information to be displayed in public settings without compromising privacy.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent segments the display system into multiple components: a public display portion for non-sensitive information and a private display portion for sensitive information. The system also segments the information itself, displaying different data sets on different display portions based on their sensitivity levels. This segmentation allows simultaneous access to information with different privacy requirements.

Inventive Principle:
Principle #1Segmentation

2Object-affected harmful factors

If access restrictions are implemented on display devices, then privacy protection is improved, but device complexity and system overhead increase

Engineering Contradiction:
Improveprivacy protectionVSAvoidsystem complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent implements preliminary action by pre-configuring display devices with privacy levels and pre-classifying information with sensitivity levels before display. The system evaluates the privacy level of each display device in advance and stores this information. When information needs to be displayed, the system simply matches the information's sensitivity level with the device's privacy level, avoiding complex real-time evaluation and reducing system overhead.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent uses copying by creating a simplified representation of the privacy evaluation results. Instead of performing complex real-time privacy assessments, the system creates a privacy level profile for each device that can be quickly referenced. This copying approach simplifies the access control mechanism while maintaining security.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS10891367B2System and method for the display of restricted information on private displays
Publication Date: 2021.01.12 NEC CORP
  • US10891367B2 patent drawing
  • US10891367B2 patent drawing
  • US10891367B2 patent drawing

AI summary

The present invention is directed to a system and method for restricting data, or portions thereof, to specific display devices when accessed by a user. Furthermore, the system and method of the invention are directed, in part, to evaluating in real time, the access level of a device and restricting the availability of sensitive information on the device according to the access level as determined by device location and hardware configuration.