Segmented Electronic Document Architecture for Secure Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for protecting confidential electronic documents often require decrypting the entire document for access, which can lead to exposure of sensitive information in public or unsecure environments.
Innovation Solution
A method and system that segment electronic documents into public and private data, allowing access to public data in any network while restricting private data access to private networks, using a patron server to manage queries and determine network security levels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the entire electronic document is decrypted for access, then the user can view all information including private data, but the private information may be exposed in public or unsecure environments
Solution Approach 1:
The electronic document is divided into public data and private data portions. The system segments the document content based on sensitivity levels, allowing public data to be accessed in any environment while private data is restricted to secure environments only. This segmentation resolves the contradiction by enabling access to necessary information without exposing sensitive content.
Solution Approach 2:
Different access permissions are applied to different portions of the document based on their sensitivity. Public data portions are made accessible with relaxed security requirements, while private data portions enforce strict security controls. This local quality approach allows the system to provide easy access where safe and restrict access where necessary.
2Object-affected harmful factors
If the entire electronic document is encrypted for security, then private information is protected, but the user cannot view any information without complete decryption
Solution Approach 1:
The document is segmented into encrypted private data portions and unencrypted public data portions. This allows the system to maintain strong encryption for sensitive information while providing easy access to non-sensitive information, resolving the contradiction between security and accessibility.
Solution Approach 2:
Instead of applying encryption to the entire document, the system applies encryption only to the necessary private portions. This partial action approach maintains security for sensitive data while eliminating the need for complete decryption when accessing public information, thereby improving ease of operation.
3Reliability
If public data is separated and transmitted separately from private data, then access control is improved, but the system complexity increases
Solution Approach 1:
The system segments the electronic document into public and private data components, enabling differential access control. This segmentation improves reliability by ensuring that only authorized users can access private data while public data remains freely accessible, with the added benefit of reduced transmission overhead for public portions.
Data Source
AI summary
A method and system for segmented architecture for managing access to electronic documents having private data and public data is disclosed herein. A request for an electronic document is sent to a segmentation server, and the request becomes two queries: one for the public or non-confidential data of the electronic document and one for the private or confidential data of the electronic document. The segmentation server determines if the request is made over a private network or a public network to determine whether private data should be sent in response to the request.