Selective Encryption of Sensitive Fields in Distributed Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed systems, existing encryption methods encrypt entire data transmissions, even if only a small portion is sensitive, which is inefficient and resource-intensive, and often insecure as internal data theft is common.
Innovation Solution
A method for selective encryption, where sensitive fields within a data transmission are identified using metadata databases and only those fields are encrypted, reducing processing time and resources, and ensuring security is separated from the application creating the data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If total encryption is applied to all data in a message, then security of sensitive information is improved, but processing time and computational resources are increased unnecessarily
Solution Approach 1:
The patent segments the data transmission into sensitive and non-sensitive fields, applying encryption only to the sensitive portions. The system identifies sensitive fields through metadata and applies selective encryption, thereby maintaining security for critical information while avoiding the overhead of encrypting entire messages.
Solution Approach 2:
The patent implements local quality by applying different processing treatments to different parts of the data. Sensitive fields receive encryption processing while non-sensitive fields are transmitted in plaintext, optimizing the balance between security and efficiency based on the specific security requirements of each data element.
2Reliability
If total encryption is applied to all data in a message, then confidentiality is improved, but computational resources and processing overhead are increased
Solution Approach 1:
The system divides the data structure into encrypted and non-encrypted segments based on sensitivity classification. By segmenting the encryption scope to only cover sensitive fields identified through metadata, the system reduces computational resource consumption while maintaining confidentiality where required.
Solution Approach 2:
The patent applies partial action by encrypting only the necessary sensitive portions of the data rather than the entire message. This selective approach avoids excessive encryption of non-sensitive data, thereby reducing unnecessary computational overhead and energy consumption.
3Reliability
If entire messages are encrypted, then data integrity is protected, but efficiency of data transmission is reduced
Solution Approach 1:
The patent segments encryption application to only cover sensitive fields within the message. This segmentation maintains data integrity protection for critical information while improving transmission efficiency by allowing non-sensitive data to be transmitted without encryption overhead.
Solution Approach 2:
The system applies local quality by providing enhanced protection (encryption) only to sensitive fields that require integrity assurance, while allowing faster transmission for non-sensitive fields. This creates a differentiated approach that optimizes both security and efficiency based on data sensitivity.
Data Source
AI summary
The present invention provides a computer implemented method, system, and computer program product for selective encryption of a data transmission. A data transmission is received. When the data transmission is received, the data transmission is unmarshaled. When the transmission is unmarshaled, objects and a set of sensitive fields within the data transmission are identified by referencing a metadata database. Only the set of sensitive fields within the data transmission are encrypted to form a partially encrypted data transmission. The partially encrypted data transmission is marshaled to form a marshaled data transmission. The marshaled data transmission is transmitted to a recipient.