Client-Side Encryption Filter for Social Network Data Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional security mechanisms on social networking websites do not adequately protect users' private data from unauthorized access by third parties, including social networking websites and applications, without users' consent.
Innovation Solution
A computerized system and method utilizing a privacy mediator and filter application that encrypts user data before posting on social networking websites, allowing users to control access by assigning decryption keys to authorized users, ensuring only designated individuals can access encrypted content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional security mechanisms are used on social networking websites, then users can access their private data, but unauthorized access by third parties and the website itself cannot be prevented
Solution Approach 1:
The patent introduces an intermediary encryption layer between the user and the social networking website. User data is encrypted client-side before transmission to the website, and decryption keys are selectively distributed only to authorized users. This intermediary mechanism prevents both the website and unauthorized third parties from accessing private data, while still allowing authorized users to view it.
2Ease of operation
If user data is stored on social networking website servers, then data accessibility is improved, but user control over who accesses their data is lost
Solution Approach 1:
The patent implements preliminary encryption of user data before it is stored on the website's servers. By encrypting data in advance and controlling key distribution, users maintain adaptability and control over who can access their information, even though the data is stored on external servers for accessibility.
3Reliability
If encryption is applied to user data before posting, then unauthorized access is prevented, but system complexity increases
Solution Approach 1:
The encryption and decryption processes are designed to be automated and self-service oriented. Users encrypt their own data through the application interface, and the system automatically manages key distribution to authorized users without requiring manual intervention or complex configuration, thereby reducing the perceived complexity for users.
Data Source
AI summary
System protects user's data on social networking websites by creating a data filter, which operates between the user and the social networks accessed by the user. The filter may be deployed as a user's web browser plug-in and operates in the following way. First, the filter encrypts all or some information that is posted by the user on a social network using SSL encryption technology. Second, to enable select other users of the social networking site to view the encrypted information, the instances of the filter executing on the accessing users' computers verify whether these users have access permission from the owner of the content and, if so, use the decryption key to decrypt the private data and enable the users to view it. The decryption key may be automatically passed to the instances of the filter running on the accessing users' computers. In an alternative implementation, the encryption and access control may be performed by a security/privacy mediator deployed on the network.