Automated Data Redaction Platform Staging Environment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Software vendors face risks of data breaches and legal penalties due to processing customer-side private data when delivering automated data redaction (ADR) applications, especially in cloud-based systems, and face challenges in providing frequent updates to on-premise applications which are less exposed but require manual installation and are resource-intensive.

Innovation Solution

A platform for delivering ADR applications that avoids vendor-side processing of customer-side private data by using a customer-side staging environment for testing and deployment, with a sealed production environment that restricts data transfer and communication, allowing vendors to provide continuous updates without exposing themselves to private data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If vendors run ADR applications on their own facilities to provide frequent updates, then productivity is improved, but reliability deteriorates due to increased risk of data breaches and improper disclosure of customer PII

Engineering Contradiction:
Improvefrequency of software updatesVSAvoiddata security and privacy protection
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent introduces a customer-side staging environment as an intermediary between the vendor and the production environment. This staging environment allows vendors to test and validate ADR applications before deployment, enabling frequent updates while maintaining data security. The staging environment acts as a buffer that prevents direct vendor access to production data, thus resolving the contradiction between update frequency and data protection reliability

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If vendors use cloud-based software delivery, then ease of operation is improved, but object-generated harmful factors worsen due to vendor exposure to private information in processed data

Engineering Contradiction:
Improvesoftware delivery convenienceVSAvoidvendor exposure to customer PII
Core Design Contradiction:
Ease of operationVSObject-generated harmful factors

Solution Approach 1:

The patent segments the software delivery system into distinct environments: a vendor-side development environment, a customer-side staging environment, and a customer-side production environment. This segmentation allows cloud-based delivery convenience while preventing vendor exposure to private data. The staging environment is specifically designed to be sealed from the production environment, creating isolated zones that maintain both operational ease and data security

Inventive Principle:
Principle #1Segmentation

3Reliability

If vendors use on-premise applications to avoid data exposure, then reliability is improved, but productivity deteriorates due to manual installation requirements and resource-intensive deployment

Engineering Contradiction:
Improvedata securityVSAvoidsoftware update frequency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent implements preliminary testing and validation in the customer-side staging environment before deploying applications to production. This preliminary action allows automated delivery mechanisms to be used while maintaining security, as all applications are pre-tested in the sealed staging environment. The staging environment serves as a preparation zone that enables automated updates without compromising data security, thus resolving the contradiction between reliability and productivity

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10684941B2Platform for delivering automated data redaction applications
Publication Date: 2020.06.16 SAP SE
  • US10684941B2 patent drawing
  • US10684941B2 patent drawing
  • US10684941B2 patent drawing

AI summary

Methods, systems, and computer-readable storage media for receiving, within a customer-side staging environment, a computer-executable ADR application from a vendor, testing the computer-executable ADR application within the staging environment, the staging environment executing the computer-executable ADR application using sample data, receiving feedback from a customer, the feedback including an election to deploy the computer-executable ADR application to a production environment from the staging environment, and providing the computer-executable ADR application to the production environment in response to the election to deploy the computer-executable ADR application, the production environment being sealed from data transfer to the staging environment.