Secure Content Display via Device Authorization and Obfuscation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current solutions for protecting sensitive content from unauthorized viewing and recording, especially in work-from-home scenarios, are not foolproof as they rely on displaying content at a frame rate that may still be visible to humans and can be captured by cameras.

Innovation Solution

A method where a server determines if a computing device is authorized to access sensitive content, and if not, it sends a modified version with obfuscated sensitive portions to that device, while sending an unmodified version to an authorized device, which can overlay non-obfuscated content on the obfuscated version displayed on the unauthorized device.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If sensitive content is displayed at a frame rate that the human eye can register but a camera cannot capture, then security against camera recording is improved, but the solution is not foolproof as unauthorized humans can still view the content and still cameras can capture it

Engineering Contradiction:
Improvesecurity against unauthorized viewing and recordingVSAvoidaccessibility of sensitive content to authorized users
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system segments content delivery by device type, providing different versions (obfuscated vs. unobfuscated) to different devices based on their authorization status and capabilities

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system applies different quality levels of content presentation to different locations (devices) - authorized devices receive full-quality unobfuscated content while unauthorized devices receive degraded obfuscated content

Inventive Principle:
Principle #3Local quality

2Reliability

If obfuscated content is sent to unauthorized devices and unobfuscated content to authorized devices, then security is enhanced, but device complexity increases due to multiple content versions and authorization checks

Engineering Contradiction:
Improveprotection of sensitive contentVSAvoidsystem complexity for content delivery
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system introduces an intermediary authorization mechanism that mediates between the content source and various devices, automatically routing appropriate content versions based on device authorization status

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system changes the obfuscation parameter based on device authorization - unauthorized devices receive obfuscated content while authorized devices receive unobfuscated content, allowing flexible security control

Inventive Principle:
Principle #35Parameter changes

3Reliability

If multiple versions of content are maintained and distributed based on device authorization, then security against unauthorized access is improved, but loss of information increases due to the need to manage and transmit multiple content versions

Engineering Contradiction:
Improvesecurity control over sensitive contentVSAvoidbandwidth and processing overhead for multiple content versions
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The system performs preliminary authorization checks and content version selection before transmission, preparing the appropriate content version in advance to avoid unnecessary transmission of multiple versions

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS20230214481A1Secure Display of Sensitive Content
Publication Date: 2023.07.06 CITRIX SYSTEMS INC
  • US20230214481A1 patent drawing
  • US20230214481A1 patent drawing
  • US20230214481A1 patent drawing

AI summary

Methods and systems for secure display of sensitive content are described herein. A server may receive, from a first computing device, a request for content. The content may include at least one portion that is marked as sensitive content. The server may determine that the first computing device does not satisfy an authorized device criterion, and send a modified version of the content to the first computing device. The modified version of the content may include the at least one portion that is obfuscated. The server may send an unmodified version of the content to a second computing device that satisfies the authorized device criterion. The second computing device may display the unmodified version of the content at least partially overlaid on top of the modified version of the content being displayed on the first computing device.