Real-Time Data Masking System for Confidential Information Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Organizations face challenges in restricting the presentation of confidential data on system screens while allowing authorized personnel to process such data as part of their business operations.
Innovation Solution
A rule-based monitoring system that monitors data presentation in real-time, determines restricted data, and masks it accordingly, while also nullifying user actions targeting restricted data to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is restricted at the record or data item level, then data privacy and compliance are improved, but system complexity and implementation difficulty increase
Solution Approach 1:
The system segments data protection into three distinct levels: application-level masking (entire application windows), record-level masking (specific database records), and data item-level masking (individual fields within records). This segmentation allows organizations to apply the appropriate level of protection based on data sensitivity, reducing overall system complexity while maintaining comprehensive security coverage.
Solution Approach 2:
The patent introduces an intermediary masking layer between the database and the user interface. This masking layer intercepts data before it reaches the user, applying security rules without requiring changes to the underlying application logic or database structure. The intermediary approach simplifies implementation by decoupling security concerns from business logic.
2Reliability
If monitoring is performed in real time, then data protection effectiveness is improved, but processing overhead and system performance decrease
Solution Approach 1:
The system performs preliminary actions by pre-defining masking rules and data classification criteria before runtime. Data is tagged and categorized in advance, allowing the masking engine to apply pre-determined rules rather than analyzing every data element in real-time. This preliminary preparation significantly reduces processing overhead during actual data access operations.
Solution Approach 2:
The masking system operates periodically at key transaction points rather than continuously monitoring all data operations. Masking rules are applied at specific intervals such as when data is retrieved from the database, when records are displayed, or when transactions are committed. This periodic approach maintains protection effectiveness while minimizing performance impact compared to continuous real-time monitoring.
Data Source
AI summary
Systems and methods for protecting and interacting with data in real time are described by the disclosed subject matter. A method includes monitoring a presentation of data by an application on a display and determining that a portion of the data is restricted. The method includes asking, in real time, the presentation of the portion of the data that is restricted.