Remote Data Processing With Context-Aware Attribute Encryption

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data processing applications face challenges in securely and efficiently executing remote operations due to the diverse range of encryption algorithms, each with varying pros and cons, and the need for context-aware encryption configurations based on data attributes' operations and classifications.

Innovation Solution

A method for dynamically selecting encryption configurations by identifying data attributes and operations, using homomorphic encryption for attributes involved in complex computations and normal encryption for critical attributes, with a proxy to manage encryption and decryption, optimizing computational resources and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If encryption is applied to all data attributes, then security is improved, but computational overhead and processing time increase

Engineering Contradiction:

Improvedata securityVSAvoidprocessing speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent applies different encryption configurations to different data attributes based on their specific characteristics and the operations performed on them. Critical attributes undergo full encryption while non-critical attributes use lighter encryption or none, achieving security where needed without unnecessary computational overhead elsewhere.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The system dynamically changes encryption parameters (algorithm type, key length, encryption mode) based on the data attribute's sensitivity, the operation being performed, and the computational resources available. This allows optimization of the security-computation tradeoff by adjusting encryption strength to match actual requirements.

Inventive Principle:

Principle #35Parameter changes

2Reliability

If homomorphic encryption is used for complex computations, then data security during processing is improved, but computational complexity and resource consumption increase

Engineering Contradiction:

Improvesecurity during computationVSAvoidcomputational complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies homomorphic encryption only partially - specifically to data attributes that require complex computations on encrypted data, while other attributes use standard encryption or remain unencrypted. This selective application reduces the overall computational burden while maintaining security where absolutely necessary.

Inventive Principle:

Principle #16Partial or excessive action

Solution Approach 2:

The system segments data attributes into different categories (critical, non-critical, computation-intensive) and applies appropriate encryption strategies to each segment. This segmentation allows homomorphic encryption to be used only where its unique capabilities are truly needed, rather than uniformly across all data.

Inventive Principle:

Principle #1Segmentation

3Productivity

If encryption configurations are determined dynamically based on data attributes and operations, then encryption efficiency is improved, but system complexity increases

Engineering Contradiction:

Improveencryption efficiencyVSAvoidsystem complexity

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The system performs preliminary analysis of data attributes and their intended operations to pre-determine appropriate encryption configurations before actual data processing begins. This upfront configuration reduces runtime complexity and allows the system to efficiently apply predetermined encryption strategies without real-time decision-making overhead.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system automatically determines encryption configurations by analyzing data attributes and operations without requiring manual intervention or complex external configuration. The encryption module self-adapts to the data and operation characteristics, simplifying the overall system architecture despite the dynamic nature of the configurations.

Inventive Principle:

Principle #25Self-service

4Reliability

If normal encryption is used for critical attributes, then security is improved, but flexibility in performing computations on encrypted data is reduced

Engineering Contradiction:

Improvesecurity for critical dataVSAvoidcomputational flexibility

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamic encryption configuration that can switch between different encryption types based on the operation being performed. For critical attributes, the system can use homomorphic encryption when computations are needed and switch to more secure but less flexible encryption methods when only storage or transmission security is required, optimizing both security and flexibility contextually.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS12580728B2Executing remotely a data processing application

Publication Date: 2026.03.17 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

The present disclosure relates to a method for remotely executing a data processing application using data. The method comprises: identifying using the data processing application data attributes of the data and operations on the identified data attributes. The identified operations of the identified data attributes may be used for determining encryption configurations for the data attributes. The data processing application may be executed on a remote system, wherein the executing comprises executing a data provision method, the data provision method comprising: encrypting values of the first data attributes according to the respective encryption algorithm; and sending encrypted values and unencrypted values of the data attributes to the remote system.