Rule-Based Document Security for Sensitive Data Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing techniques for encrypting documents with sensitive information often require encrypting entire documents, leading to unnecessary access restrictions and significant overhead in data sharing, as they lack targeted encryption and fine-grained access control.
Innovation Solution
Implementing a rule-based system that identifies and encrypts only sensitive components within documents, replacing them with non-sensitive placeholders, and transmitting encrypted components separately with metadata for reconstruction, allowing authorized endpoints to access the original content while keeping sensitive information secure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If entire documents are encrypted to protect sensitive information, then security of sensitive information is improved, but access to non-sensitive portions becomes restricted and data sharing overhead increases
Solution Approach 1:
The patent segments a document into multiple components, identifying and separating sensitive components from non-sensitive components. Each component is then encrypted independently based on its sensitivity level, allowing selective access where authorized users can access non-sensitive portions without decryption while sensitive portions remain encrypted and accessible only to authorized parties.
Solution Approach 2:
The patent applies different encryption qualities to different parts of the document. Sensitive components receive encryption protection while non-sensitive components remain accessible in plaintext. This local differentiation of security quality allows the document to maintain both security for sensitive information and ease of access for non-sensitive information.
2Measurement precision
If existing encryption techniques are implemented in each application to detect and encrypt sensitive information, then detection accuracy is improved, but device complexity and development overhead increase
Solution Approach 1:
The patent creates a universal encryption service that can be accessed by multiple applications through a common interface. This service handles sensitive information detection, encryption key management, and encryption operations centrally, eliminating the need for each application to implement its own encryption logic while maintaining consistent detection accuracy across all applications.
Solution Approach 2:
The patent introduces an intermediary encryption service layer between applications and sensitive information. This intermediary service contains the detection and encryption logic, receiving requests from various applications and returning encrypted components. This mediator approach centralizes complexity in a dedicated service rather than distributing it across multiple applications.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Aspects of the present disclosure provide techniques for rule-based document security. Embodiments include receiving, from a computing device: an amended document; an encrypted sensitive component; and information relating to reconstructing a document based on the amended document and the encrypted sensitive component. Embodiments include decrypting the encrypted sensitive component to produce a decrypted sensitive component. Embodiments include determining, based on the information relating to reconstructing the document, a document location that corresponds to the decrypted sensitive component. Embodiments include reconstructing the document by inserting the decrypted sensitive component into the amended document at the document location.