Sensitive Data Display via Source Encryption and Mediated Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data security tools provide generic results about sensitive data, requiring analysts to perform extra validation steps to ascertain the validity of matches, making the process inefficient and cumbersome.
Innovation Solution
A system and method for securely collecting and displaying sensitive data using asymmetric key pairs for encryption and decryption, ensuring data privacy by encrypting sensitive data on a first device, transmitting cryptograms to a second device, storing them securely, and decrypting them on a third device for display while maintaining control over the data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If sensitive data is transmitted in plaintext for efficient access and display, then productivity is improved, but data security deteriorates
Solution Approach 1:
The system performs preliminary encryption of sensitive data at the source device before transmission. The data is encrypted using asymmetric encryption (public key encryption) so that only the corresponding private key can decrypt it. This preliminary security measure allows the data to be transmitted and stored without compromising security, while maintaining efficient access through the decryption capability when needed.
Solution Approach 2:
The patent introduces an intermediary decryption device that acts as a mediator between the stored encrypted data and the final display. The decryption device receives encrypted data, decrypts it using the private key, and then displays the plaintext. This intermediary approach allows efficient display of sensitive data while maintaining security during transmission and storage phases.
2Reliability
If generic results are provided to maintain data privacy, then data security is improved, but information completeness deteriorates
Solution Approach 1:
The system applies different quality levels to different portions of data. Sensitive data fields are encrypted and protected, while non-sensitive contextual information (such as file names, metadata, or surrounding text) can be displayed in plaintext. This local differentiation allows analysts to see contextual information for validation while maintaining security for the actual sensitive values.
3Measurement precision
If sensitive data is displayed in plaintext for analyst validation, then measurement precision is improved, but data security deteriorates
Solution Approach 1:
The system dynamically controls the state of sensitive data, switching between encrypted and decrypted forms based on operational needs. Data is encrypted during transmission and storage, then dynamically decrypted only when and where validation is required, and re-encrypted or deleted afterward. This dynamic state management allows precise validation when needed while maintaining security during other phases.
Data Source
AI summary
Systems for collecting and securely transmitting and displaying sensitive data are described. In a described configuration, the system includes service provider software deployed to a customer endpoint for detecting sensitive data and encrypting the same to produce a cryptogram, at least one service provider server for receiving and storing cryptograms for later access, and a client deployed to a consumption device for requesting cryptograms from the at least one service provider server, transmitting the cryptogram to a customer decryption module for decryption, and for displaying the decrypted sensitive data via the consumption device. Corresponding methods and computer-readable media are also described.