Secondary Record Generation for Secure Resource Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cybersecurity measures are inadequate in preventing unauthorized access and mitigating the negative effects of data breaches, as they often fail to detect breaches in a timely manner and may allow significant damage to occur before detection.
Innovation Solution
A system that generates secondary records with modified instances of primary records, stored in different memory areas, and grants access to applications only through entitlements, allowing controlled resource transfers while keeping primary records inaccessible to prevent unauthorized access and ensure data integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If applications are granted direct access to primary records for resource transfers, then ease of operation is improved, but security is worsened due to potential unauthorized access
Solution Approach 1:
The patent introduces a secondary set of records as an intermediary layer between applications and primary records. Applications operate on secondary records which are generated from but isolated from the primary records. This mediator structure allows applications to perform resource transfers without direct access to sensitive primary data, thus maintaining ease of operation while preventing unauthorized access to the actual primary records.
Solution Approach 2:
The patent creates secondary records that are copies or representations of primary records. These secondary records contain the necessary information for applications to perform operations (such as resource transfer identifiers) but are distinct from the actual primary records. Applications interact with these copied records instead of the originals, providing operational capability while protecting the integrity and security of the primary data.
2Productivity
If primary records are stored in memory for frequent access, then productivity is improved, but vulnerability to breaches is worsened
Solution Approach 1:
The patent segments the record storage system into two distinct parts: primary records stored securely in first memory areas and secondary records stored in second memory areas. This segmentation allows the system to maintain fast access to operational data (secondary records) while isolating sensitive primary records from potential breaches. The secondary records can be freely accessed and modified for productivity purposes without compromising the security of primary records.
3Object-affected harmful factors
If secondary records are generated with different identifiers, then security is improved by obscuring data, but device complexity is worsened
Solution Approach 1:
The patent generates secondary records as copies of primary records with modified identifiers. The copying process creates a representation that preserves the functional information needed for operations while changing identifying characteristics. This approach provides security through obfuscation without requiring complex encryption or transformation systems, as the relationship between primary and secondary records remains straightforward.
Solution Approach 2:
The patent modifies specific parameters of the records during the generation of secondary records, specifically changing identifiers while preserving other functional attributes. This selective parameter change allows the system to obfuscate data for security purposes while maintaining the operational integrity of the records. The modification process is simple and direct, avoiding the need for complex transformation systems.
Data Source
AI summary
In certain embodiments, resource allocation related to records may be facilitated by generating and using modified instances of such records. In some embodiments, a set of records associated with a user may be stored in a memory area, where each such record includes a record identifier. In response to obtaining one or more commands related to a resource transfer from a user device associated with the user, a new set of records associated with the user may be generated such that each record of the new set is (i) a modified instance of a corresponding record of the record set and (ii) includes a record identifier different from the record identifier of the corresponding record. In one use case, the new records and its data may then be utilized to perform operations related to the user commands. In another use case, the new records may replace its older corresponding records.