Information Processing Program for Sensitive Data Usage Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In flow-based programming, it is challenging to precisely determine whether sensitive information is being used or processed within program processes, especially in environments where the presence or absence of such information varies, leading to potential security risks and compliance issues.
Innovation Solution
An information processing program that extracts and compares data to determine if sensitive information is being used by executing processes, utilizing filters to detect and remove sensitive information, and displaying risk alerts on a development screen to facilitate accurate risk assessment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a developer manually determines whether sensitive information is used in FBP programs, then ease of operation is improved, but measurement precision deteriorates due to inability to accurately track sensitive information flow across varying execution environments
Solution Approach 1:
The system creates virtual copies of data objects marked with metadata indicating sensitivity status. By processing copies rather than original data, the system can track sensitive information flow through the FBP graph without exposing actual sensitive data, enabling precise detection while maintaining operational safety
Solution Approach 2:
The system introduces an intermediary layer between data processing components that tracks and monitors sensitive information flow. This intermediary mechanism records data transformations and transmissions, providing accurate detection of sensitive information usage patterns across the FBP program execution
2Measurement precision
If comprehensive tracking of sensitive information is implemented, then measurement precision is improved, but device complexity increases due to the need to monitor data flow across all processing parts
Solution Approach 1:
The tracking system is segmented into discrete tracking objects that can be independently managed. Each tracking object monitors specific data flows and can be added or removed from the FBP graph as needed, allowing comprehensive tracking capability while maintaining modular simplicity and reducing overall system complexity
Solution Approach 2:
The tracking mechanism serves multiple functions simultaneously: it tracks sensitive information flow, identifies processing parts that handle sensitive data, and provides detection capabilities. This multi-functionality reduces the need for separate specialized components, thereby reducing device complexity while maintaining high measurement precision
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An information processing program that causes a computer to execute a process includes: extracting second data through executing a first process (lla) on first data (11b) including sensitive information; outputting fourth data obtained by executing the first process (11a) on third data, the third data being obtained by executing a second process (11c) to delete sensitive information on the first data (11b); and determining, based on a result of comparing the second data with the fourth data, whether or not the first process (lla) uses sensitive information.