Session Recording Privacy Obfuscation via Dual Stream Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing session recording tools fail to accurately identify and protect private information, leading to potential legal and compliance issues due to the inability to reverse obfuscation and specify recording exclusions, and existing solutions like OCR and DLP techniques are inaccurate.
Innovation Solution
A privacy protection system that obfuscates private information by default in session recordings, generating both obfuscated and encrypted streams, requiring authorization for clarification and decryption, ensuring compliance with legal and organizational requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If private information is obfuscated in session recordings, then privacy protection is improved, but the ability to review and clarify private information is worsened
Solution Approach 1:
The session recording is segmented into two separate streams: an obfuscated stream for privacy protection and an unobfuscated stream for information review. This segmentation allows both privacy protection and information review capabilities to coexist without compromising either function.
Solution Approach 2:
The system performs preliminary obfuscation of private information during recording, but retains the original unobfuscated data in a separate stream. When clarification is needed, the pre-retained unobfuscated stream can be accessed without needing to reverse the obfuscation process.
2Reliability
If traditional obfuscation methods are used, then privacy protection is improved, but reversibility for legal compliance is worsened
Solution Approach 1:
The recording system creates separate obfuscated and unobfuscated streams, allowing the unobfuscated stream to be provided to legal or compliance officers when required, thus maintaining both privacy protection and legal compliance capabilities.
Solution Approach 2:
The system introduces an intermediary mechanism (separate stream retention and authorized access control) that mediates between privacy protection requirements and legal compliance needs, allowing controlled access to unobfuscated information when legally required.
3Measurement precision
If all UI controls are recorded in detail, then monitoring accuracy is improved, but privacy exposure is worsened
Solution Approach 1:
The system applies different quality levels to different parts of the recorded data: UI controls are recorded in full detail for monitoring accuracy, while private information within those controls is obfuscated in the primary stream but preserved in the unobfuscated stream for authorized access only.
Solution Approach 2:
The system changes the obfuscation parameter dynamically based on the type of information being displayed. When private information is detected in UI controls, the obfuscation is applied to the primary stream while maintaining the original data in the unobfuscated stream, adjusting the level of protection based on information sensitivity.
Data Source
AI summary
A computer system is provided. The computer system includes a memory and a processor. The processor is configured to scan user interface (UI) data representative of a plurality of UI controls; detect a portion of the UI data associated with private information, the portion corresponding to a UI control of the plurality of UI controls; record first session data comprising an obfuscated version of the UI control and unobfuscated versions of other UI controls of the plurality of UI controls; record second session data comprising an unobfuscated version of the UI control; encrypt the second session data to generate encrypted session data; and store the encrypted session data in association with the first session data.