Session-Key Encryption for Secure Sensitive Data Collection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data collection methods are vulnerable to breaches, leading to unauthorized access and misuse of sensitive information, and fail to comply with privacy regulations, posing risks to individual privacy and legal compliance.
Innovation Solution
Sensitive data is collected and encrypted directly at a user device using a dynamic encryption key generated based on a login session, and stored separately from decryption information to ensure secure transmission and storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If sensitive data is collected and stored in traditional centralized methods, then data accessibility and ease of operation are improved, but security vulnerability and risk of breaches increase
Solution Approach 1:
The patent segments sensitive data into encrypted portions and stores them in distributed locations across user devices rather than centralized repositories. Encryption keys are separately managed and only temporarily assembled when decryption is needed, preventing unauthorized access even if data storage locations are compromised.
Solution Approach 2:
The patent introduces encryption as an intermediary layer between data storage and access. Data is encrypted using dynamic keys that are not permanently stored with the data, creating a secure barrier that requires authenticated key reconstruction for decryption, thus mediating between data availability and security requirements.
2Productivity
If large amounts of customer data are stored for business operations, then productivity and data utility are improved, but exposure to cyberattacks and data breaches increases
Solution Approach 1:
The patent applies preliminary encryption to sensitive data before storage or transmission. Data is encrypted using dynamically generated keys derived from authentication credentials, ensuring that even if data is intercepted or accessed unauthorizedly, it remains incomprehensible without the temporary decryption keys.
Solution Approach 2:
The patent changes the state of data from plaintext to encrypted format, and dynamically changes encryption keys based on authentication sessions. This parameter transformation ensures that stored data lacks utility to attackers while maintaining full accessibility for authorized users who possess valid authentication credentials.
3Ease of operation
If personal information is collected for service delivery, then service quality and customer support are improved, but compliance with privacy regulations becomes more difficult
Solution Approach 1:
The patent extracts sensitive personal information from centralized databases and distributes it across encrypted storage locations on user devices. By separating data from centralized control points and implementing distributed encryption, the system inherently satisfies GDPR and CCPA requirements for data minimization, user control, and secure processing.
Solution Approach 2:
The patent implements self-service encryption where user authentication credentials automatically generate encryption keys for their own data protection. This self-managed cryptographic approach empowers users with control over their personal information while automatically ensuring regulatory compliance without requiring complex external compliance management systems.
Data Source
AI summary
A method for secure collection of sensitive data at a computer device includes receiving a request for sensitive data. The request indicates a set of parameters and a dynamic encryption key. The dynamic encryption key is generated by an authorized data requester based on a login session identifier. The method includes creating a user interface for collecting the set of parameters by an artificial intelligence (AI) software of the computer device. The method includes providing the user interface for collecting the set of parameters. Responsive to collecting the set of parameters from the user, the method includes encrypting the set of parameters using the dynamic encryption key and an encryption algorithm associated with the authorized data requester. The method includes transmitting the encrypted set of parameters to the authorized data requester to be decrypted.