Session Playback Privacy Controls for Sensitive UI Data

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing user interface playback technologies fail to protect user privacy by inadvertently collecting and displaying sensitive data, which is unnecessary for assessing interface quality and can lead to data leaks.

Innovation Solution

Implement methods to detect potentially sensitive data during user sessions, using machine learning and data loss prevention techniques, and provide controls for administrators to manage privacy rules, masking or blocking such data during playback, while maintaining accurate representation of interface interactions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If user sessions are recorded and played back to assess interface quality, then user experience evaluation is improved, but sensitive data is inadvertently collected and displayed

Engineering Contradiction:

Improveuser experience evaluation accuracyVSAvoiddata privacy leakage

Core Design Contradiction:

Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The system extracts and removes sensitive data from user session recordings before playback. A detection mechanism identifies potentially sensitive data in event data, and privacy rules are applied to block or mask this data, ensuring only non-sensitive information is displayed during playback while maintaining the integrity of user experience assessment.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces an intermediary processing layer between data collection and playback display. This intermediary system includes a detection engine that analyzes event data, a rule management system that applies privacy policies, and a playback system that enforces these rules, thereby mediating between the need for accurate user experience evaluation and the requirement to protect sensitive data.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If sensitive data detection and privacy rule enforcement are implemented, then data privacy protection is improved, but system complexity increases

Engineering Contradiction:

Improvedata privacy leakageVSAvoidsystem architecture complexity

Core Design Contradiction:

Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The system is segmented into distinct functional modules: a detection engine for identifying sensitive data, a rule management system for configuring privacy policies, and a playback system for enforcing rules during playback. This segmentation allows each component to be developed, maintained, and configured independently, managing overall system complexity while providing comprehensive privacy protection.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system employs machine learning models that automatically learn and adapt to identify sensitive data patterns without requiring manual configuration of every privacy rule. The detection engine self-improves through training on labeled data, reducing the burden of manual system configuration and maintenance while enhancing privacy protection capabilities.

Inventive Principle:

Principle #25Self-service

3Measurement precision

If machine learning techniques are used to detect sensitive data, then detection accuracy is improved, but processing time and computational resources increase

Engineering Contradiction:

Improvesensitive data detection accuracyVSAvoiddata processing time

Core Design Contradiction:

Measurement precisionVSLoss of time

Solution Approach 1:

The system performs preliminary training of machine learning models offline using labeled datasets to establish detection patterns before actual use. During runtime, the pre-trained models rapidly classify event data as sensitive or non-sensitive, significantly reducing processing time compared to real-time training while maintaining high detection accuracy.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The detection system applies a two-stage approach: first using faster, simpler filtering rules to eliminate obviously non-sensitive data, then applying more computationally intensive machine learning models only to borderline cases. This partial application of complex detection methods reduces overall processing time while maintaining high accuracy for sensitive data identification.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS12547745B1Proactive privacy in user interface session playback using sensitive data detection

Publication Date: 2026.02.10 FULLSTORY INC

AI summary

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for detecting potentially sensitive data and updating rules that prevent the display of the potentially sensitive data in playback of user sessions with user interfaces. In one aspect, a method includes receiving, from a client device at which a user session occurs, event data related to the user session, detecting potentially sensitive data in the event data, generating and displaying playback of the user session using the event data including, displaying, within the playback of a particular user interface that includes a user interface element that displayed the potentially sensitive data, a sensitive data indicator that indicates that the user interface element includes the potentially sensitive data, and displaying a user interface control that enables a user to select whether to prevent data that is displayed by the user interface element from being displayed.