Automated Report Data Blurring with Permission-Based Redaction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection methods require manual intervention for redacting sensitive information, leading to inefficiencies and potential exposure of confidential data when generating reports with varying access permissions.
Innovation Solution
An automated system that uses an application server to generate report versions based on user permissions, replacing inaccessible data with randomly generated character strings that match the attributes of the original data to maintain report layout integrity and visually indicate non-actual data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual redaction is used to protect sensitive information, then data privacy is improved, but productivity deteriorates due to time-consuming manual intervention
Solution Approach 1:
The system automatically performs data redaction by detecting sensitive information patterns and replacing them with blurred placeholders without requiring manual user intervention. The application server autonomously generates redacted report versions based on user permission levels, eliminating the need for manual redaction while maintaining data privacy protection.
Solution Approach 2:
The system pre-defines permission templates and data sensitivity patterns that are applied automatically when generating reports. By preparing redaction rules and permission configurations in advance, the system enables rapid generation of privacy-protected report versions without time-consuming manual redaction during the reporting process.
2Reliability
If multiple redacted versions of documents are stored independently, then data access control is improved, but device complexity deteriorates due to multiple storage copies
Solution Approach 1:
The system creates virtual copies of report data with different redaction levels applied through software processing rather than physical document copies. Multiple redacted versions are generated as digital representations from a single source document, allowing different users to receive appropriately redacted versions without maintaining separate physical or digital file copies for each permission level.
Solution Approach 2:
The system dynamically generates redacted report versions based on real-time user permission queries. Instead of storing static redacted copies for every possible permission combination, the application server dynamically applies appropriate redaction rules when each user requests a report, adapting the level of redaction to the specific user's authorization level without requiring pre-stored versions for all scenarios.
3Productivity
If automated data replacement is implemented, then productivity is improved, but manufacturing precision deteriorates due to potential layout misalignment
Solution Approach 1:
The system changes the visual parameters of replacement placeholders to match the original data characteristics. Blurred placeholders are generated with matching font sizes, colors, and positional parameters to the replaced sensitive data, ensuring automated replacement maintains report layout alignment and visual consistency without requiring manual adjustment.
Data Source
AI summary
A first user may generate a report that includes multiple data values. A second user may be granted access to some of the data values but not others. To accommodate the partial access permission, an application server may generate a version of the report that includes only the data values the second user is permitted to access. The data values that the second user is not permitted to access may be replaced by randomly generated character strings. A blurring effect may be applied to the replacement data values, providing a visual indication that the replacement data values are not the actual data values. Some data values of the report may depend on other data values. Both data values to which the user has explicitly been denied access and data values that depend on them are replaced in the generated version of the report.