Record-Level Encryption for Decentralized Data Visibility Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems lack a decentralized solution that allows data owners to control access and visibility of their sensitive data, particularly in healthcare settings, where patients do not have control over who can access their electronic health records.
Innovation Solution
A record-level encryption scheme that decentralizes data visibility control, enabling data owners to grant, deny, and revoke access to their data directly, using cryptographic keys and a data visibility control platform to interact with data consumers without intermediaries.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If centralized data intermediation services are used to manage access control, then data security and compliance standards are maintained, but data owners lose control over who has access to their data
Solution Approach 1:
The patent segments access control into two independent layers: (1) cryptographic access control at the record level using encryption keys, and (2) visibility control through the data intermediary platform. This allows data owners to maintain cryptographic control over their data while the intermediary provides compliance and security management, resolving the contradiction between security reliability and owner control.
Solution Approach 2:
The patent introduces a data visibility control intermediary that mediates between data owners and data consumers without having access to decryption keys. The intermediary manages visibility, consent, and compliance while cryptographic protocols ensure that only authorized parties can access the actual data, thus maintaining both security and owner control.
2Ease of operation
If patient-managed personal health records are implemented, then data ownership control is transferred to patients, but significant administrative and security burdens are placed on patients
Solution Approach 1:
The patent introduces a data visibility control intermediary that handles the complex administrative and security tasks on behalf of patients. The intermediary manages consent workflows, access requests, and compliance requirements, while patients retain control through simplified interfaces. This resolves the contradiction by transferring control to patients without burdening them with complexity.
Solution Approach 2:
The system enables patients to self-manage their data access preferences and consent settings through the intermediary platform without requiring them to understand underlying cryptographic or security mechanisms. The intermediary automatically handles the complex processing, reducing the effective burden on patients while maintaining their control.
3Ease of operation
If record-level encryption is implemented to enable data owner control, then data visibility control is decentralized to data owners, but system complexity increases
Solution Approach 1:
The patent segments the system into distinct functional components: cryptographic key management, encryption/decryption operations, visibility control, and consent management. Each component handles a specific aspect of the problem, reducing overall system complexity while enabling data owner control at the record level.
Solution Approach 2:
The data visibility control intermediary abstracts the complexity of record-level encryption management from data owners. It handles key distribution, access request processing, and consent management, allowing owners to control their data through simplified interfaces without directly managing the cryptographic complexity.
Data Source
Figure 1A
Figure 1B
Figure 2A
AI summary
Disclosed herein are embodiments for a record-level encryption scheme. A data visibility control platform may facilitate record-level encryption between a data owner device and a requester device, requesting access to the encrypted record. The record may contain sensitive and/or confidential information of the data owner. The data owner may directly control the visibility of the record via the data visibility control platform. The data visibility control platform may use a combination of private and public cryptographic keys associated with the data owner and requester to provide record-level encryption. An embodiment may include record keys used to encrypt records being stored by a records database managed by a data intermediary. The record key may be encrypted using the public key of the data owner and stored on a blockchain. Access to the record key stored on the blockchain is controlled by the data owner.