Protected Data Encryption Key Substitution for Secure Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enterprise organizations face challenges in securely transmitting protected data while optimizing network resources, bandwidth utilization, and maintaining efficient operations, as existing methods often struggle to balance data security with speed and accuracy.
Innovation Solution
A computing platform separates protected data from non-protected attribute data, generates an encryption key using a unidirectional hashing algorithm, substitutes the protected data with the encryption key, and stores the association in a database, allowing secure transmission of the modified data to external vendors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If protected data is transmitted securely using encryption, then data security is improved, but network bandwidth utilization and transmission speed deteriorate
Solution Approach 1:
The patent extracts only the essential identifying attributes from protected data and transmits them externally, while keeping the full protected data securely stored locally. This separation allows external systems to perform matching operations on minimal data, dramatically reducing network bandwidth consumption while maintaining security.
Solution Approach 2:
The patent introduces a cryptographic hash function as an intermediary that transforms protected data into a fixed-size hash value. This hash serves as a secure representative that can be transmitted and compared without exposing the original sensitive data, thus protecting both security and bandwidth efficiency.
2Reliability
If protected data is encrypted and transmitted to external vendors, then data security is improved, but processing speed and operational efficiency deteriorate
Solution Approach 1:
The patent extracts only the cryptographic hash of protected data for external transmission and processing, rather than transmitting the full encrypted data. This extraction enables external vendors to perform rapid hash comparisons without handling sensitive information, significantly improving processing speed while maintaining security.
Solution Approach 2:
The patent transforms the protected data from its original large-size format into a compact hash value with fixed size. This parameter transformation reduces the amount of data that needs to be processed, transmitted, and stored, thereby improving operational efficiency without compromising security.
3Loss of information
If full protected data is transmitted to external systems, then data completeness is improved, but security risks and bandwidth consumption increase
Solution Approach 1:
The patent extracts only the essential identifying features of protected data in the form of cryptographic hashes for external transmission. This extraction maintains the functional completeness needed for data matching and comparison while eliminating the security risks associated with transmitting full sensitive data.
Solution Approach 2:
The patent creates a cryptographic copy (hash) of the protected data that preserves the essential identifying characteristics needed for comparison purposes. This copy can be safely transmitted and processed externally without exposing the original sensitive information, thus reducing security risks while maintaining operational completeness.
Data Source
AI summary
Aspects of the disclosure relate to data transmission with encryption of protected data. A computing platform may separate, via a computing device and in electronic data associated with a user, protected data from non-protected attribute data. Subsequently, the computing platform may generate, for the protected data, an encryption key. Then, the computing platform may modify the electronic data by replacing the protected data with the encryption key. Then, the computing platform may store, in a database, an association between the user, the protected data, and the encryption key. Subsequently, the computing platform may provide, via a network and to an external vendor, the modified electronic data comprising the encryption key and the non-protected attribute data.