Real-Time Content Redaction Engine for Workflow Fields

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In business process management (BPM) workflow applications, users may inadvertently enter private information into fields not configured for content masking, leading to unauthorized access and security risks, as existing systems do not effectively implement real-time redaction for all input fields.

Innovation Solution

A system and method for implementing real-time redaction in a workflow configurable environment, which includes a processing device configured to receive user requests, initiate a real-time content redaction engine, parse embedded structures, identify and mask private information, and authenticate users based on authorization levels, ensuring that only authorized users access sensitive data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If real-time content redaction engine is initiated to mask private information, then data security is improved, but system complexity increases

Engineering Contradiction:
Improvedata securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary actions by pre-configuring content masking for specific input fields and pre-establishing authorization levels for different users. When a user requests to load a user interface, the system has already prepared the redaction rules and authorization protocols, enabling rapid real-time redaction without complex runtime decision-making. This resolves the contradiction by shifting complexity from runtime operations to initial configuration.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system segments the redaction functionality by applying content masking only to specific pre-configured input fields rather than universally across all fields. Additionally, authorization levels are segmented into discrete tiers that determine which private information is accessible. This targeted segmentation reduces overall system complexity while maintaining strong security where needed.

Inventive Principle:
Principle #1Segmentation

2Reliability

If authorization protocol is implemented to determine user access levels, then access control is improved, but processing time increases

Engineering Contradiction:
Improveaccess controlVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary authentication and authorization checks before loading the user interface. By determining the user's authorization level in advance and configuring which private information should be masked, the system avoids repeated authorization processing during content display. This preliminary action reduces processing time while maintaining strict access control.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If content masking is applied to all input fields, then data security is improved, but ease of operation deteriorates

Engineering Contradiction:
Improvedata securityVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system applies content masking selectively only to specific input fields that are configured to handle private information, rather than uniformly across all fields. This local application of security measures maintains ease of operation for public information fields while providing strong protection for sensitive fields, resolving the contradiction between security and usability.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS11928225B2System for implementing real-time redaction in a workflow configurable environment
Publication Date: 2024.03.12 BANK OF AMERICA CORP
  • US11928225B2 patent drawing
  • US11928225B2 patent drawing
  • US11928225B2 patent drawing

AI summary

Systems, computer program products, and methods are described herein for implementing real-time redaction in a workflow configurable environment. The present invention is configured to electronically receive, from a user input device, a request to load at least one user interface associated with an application; initiate a real-time content redaction engine on contents of the one or more fields associated with the at least one user interface in response to receiving the request, wherein initiating further comprises: parsing one or more embedded structures associated with the one or more fields; identifying private information in the one or more fields based on at least parsing the one or more embedded structures; and masking the private information in the one or more fields; and load the at least one user interface associated with the application in response to masking the private information in the one or more fields.