Secure Reporting Across Multiple Data Vaults Without Data Exposure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Businesses face challenges in securely sharing sensitive data while complying with regulatory requirements, as existing data security systems struggle to allow access to authorized parties while maintaining data privacy and security, especially when combining data from multiple partners.
Innovation Solution
An escrow service is introduced that uses canonicalization and one-way transformations to perform operations on data from multiple data vaults without exposing the actual data, ensuring that only transformed data is shared and accessed by the escrow service, using encryption keys and secure communication protocols to maintain data security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted and access is restricted to maintain security, then data security is improved, but data sharing and combined analysis capabilities deteriorate
Solution Approach 1:
The patent introduces an escrow service as an intermediary between data owners and data requesters. The escrow service receives encrypted data from multiple data owners, performs authorized operations on the encrypted data without decryption, and returns results to requesters. This mediator enables secure data sharing and combined analysis while maintaining encryption and access restrictions, resolving the contradiction between data security and data sharing capability.
2Loss of information
If data is transformed using one-way functions to protect privacy, then data privacy is improved, but data usability for analysis deteriorates
Solution Approach 1:
The patent applies parameter changes by using homomorphic encryption and other cryptographic transformations that modify the data representation while preserving computational properties. These transformations allow mathematical operations to be performed on encrypted data, enabling analytics and combined analysis on transformed data without exposing the original sensitive information. This resolves the contradiction by maintaining data privacy through transformation while preserving data usability for authorized analysis.
3Reliability
If multiple data vaults maintain independent security controls, then individual data security is improved, but coordinated operations across vaults deteriorate
Solution Approach 1:
The patent implements a universal escrow service interface that can interact with multiple different data vaults, each maintaining their own independent security controls and encryption methods. The escrow service provides a standardized multi-functional interface that handles various operations (queries, updates, deletions) across different vault types and security implementations. This universality enables coordinated operations across multiple independently-secured vaults without requiring changes to individual vault security architectures, resolving the contradiction between individual security and system coordination.
Data Source
AI summary
Secure reporting operations are described that are suitable with multiple data vaults. An escrow service facilitates such reporting operation with a requester data interface to receive a request to perform an operation and to receive requester values from a requester data vault. The operation request identifies the operation and fields of the requester data vault with which to perform the identified operation. A data interface receives transformed values from a partner data vault, the values being transformed using a key. An operation engine establishes the key for the transformation of values from the partner data vault, to perform an operation on the transformed values and the requester values, to compile results of the operation as a report, and to configure the report using the requester values, wherein the requester interface is further to send the report to the requester.