Sensitive Data Identification via Interval Scanning and Checksum Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to effectively identify and protect sensitive information, such as personal identification numbers, from unauthorized access and identity theft, as they are often stored in computer systems that are vulnerable to illegal access and mining.
Innovation Solution
A method involving interval scanning and sequential analysis of data strings to identify potentially sensitive information, including personal identification numbers, across various Unicode formats, with supplemental searches for delimiters and known identifiers, and verification using checksum algorithms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If comprehensive scanning of all data bytes is performed to identify sensitive information, then identification accuracy is improved, but processing time increases significantly
Solution Approach 1:
The patent divides the data scanning process into two distinct phases: an initial interval scan that examines every nth byte to identify potential sensitive information locations, followed by a sequential analysis phase that thoroughly examines only the identified candidate regions. This segmentation allows the system to maintain high identification accuracy while significantly reducing overall processing time compared to examining every byte in detail.
Solution Approach 2:
The patent applies partial action by performing comprehensive sequential analysis only on specific portions of data where sensitive information is suspected to be located, rather than applying the same level of analysis to the entire data set. The interval scan identifies candidate regions, and the resource-intensive sequential analysis is applied partially only to those regions, optimizing the balance between accuracy and processing efficiency.
2Reliability
If multiple verification methods including checksum algorithms are applied to confirm sensitive information, then reliability of identification is improved, but device complexity increases
Solution Approach 1:
The patent implements preliminary action by performing format validation checks (such as checksum algorithms for Social Security Numbers, credit card numbers, and other identification formats) during the initial interval scanning phase. This preliminary validation filters out obviously invalid candidates before subjecting them to more complex verification methods, thereby improving overall identification reliability while managing system complexity through staged verification.
3Measurement precision
If detailed sequential analysis is performed on candidate data strings to verify sensitive information format, then measurement precision is improved, but productivity decreases
Solution Approach 1:
The patent segments the data processing workflow into an initial fast interval scan phase that identifies candidate regions, followed by a detailed sequential analysis phase applied only to those candidates. This segmentation ensures that high-precision detection is applied only where necessary, maintaining detection precision while preserving overall scanning throughput by avoiding detailed analysis of non-candidate data.
Solution Approach 2:
The patent applies detailed sequential analysis partially only to candidate data strings identified by the interval scan, rather than applying it to the entire data set. This partial application of rigorous verification methods maintains high detection precision for potential sensitive information while preserving scanning productivity by limiting the scope of resource-intensive operations.
Data Source
AI summary
Methods for identifying potentially sensitive information and protecting such potentially sensitive information include scanning systems that collect and/or disseminate such information. Without limitation, systems collect and/or disseminate personal identification numbers (e.g., personal identification numbers, tax identification numbers, etc.), such as merchant systems, bank systems, healthcare systems, and the like, that collect, use, or disseminate sensitive information may be scanned to identify sequences of data that are likely to be sensitive, and may take actions to protect such sequences of data. Scanning and protection systems are also disclosed.