Secure Conversation Record Sharing With Field-Level Permissions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing protocols fail to account for different access restrictions at database systems, risking unauthorized access to shared data when integrating data across platforms.
Innovation Solution
A secure sharing service that enforces field-level security by determining a viewable subset of data fields based on participant permissions, generating user-specific or ephemeral shared data messages, and supporting real-time permissions monitoring.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If existing protocols are used to share data across platforms, then data integration and collaboration are facilitated, but unauthorized access and data leakage risks increase due to failure to account for database access restrictions
Solution Approach 1:
The patent introduces a secure sharing service as an intermediary component between the communication platform and external database systems. This service mediates data sharing by enforcing field-level security policies, obtaining user permissions, and filtering data before transmission. The intermediary prevents direct unauthorized access while enabling controlled data integration across platforms.
2Loss of information
If all fields of a data record are shared in a conversation, then complete information is provided for collaboration, but unauthorized access to sensitive fields occurs when participants lack permission
Solution Approach 1:
The patent implements field-level security where different fields of the same data record have different access permissions. The secure sharing service evaluates permissions for each field individually and includes only those fields that the participant is authorized to view. This allows complete information sharing within permission boundaries, providing each participant with their specific view of permitted data.
3Device complexity
If data sharing permissions are not monitored in real-time, then system complexity is reduced, but data security is compromised when permissions change at the external system
Solution Approach 1:
The patent implements a permissions monitoring mechanism that continuously checks whether shared data records still comply with current access permissions. When a participant's permissions change or the data record is modified at the external system, the monitoring service detects these changes and removes or updates the shared content accordingly. This feedback loop maintains data security without requiring complete system redesign.
Data Source
AI summary
Systems and methods are provided for securely sharing database records in the context of a conversation at a communication platform using a secure sharing service. The secure sharing service identifies an external system user identifier for a participant in the conversation at the communication platform using an identifier associated with the participant at the communication platform, identifies permissions associated with the data record at the external system, and identifies a subset of fields of the data record viewable by the participant using the external system user identifier. The secure sharing service obtains values for the identified subset of fields of the data record from the external computing system and automatically generates a shared data record message associated with the conversation at the communication platform that includes the obtained values for the identified subset of fields of the data record.