Interaction Validation with Split User Data and Obfuscated Identifiers

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Data shared outside a firewall during interactions between internal and external entity servers is vulnerable to interception and interpretation by bad actors, compromising security and slowing down processing times.

Innovation Solution

The system splits user data into logical components, obfuscates them with unique identifiers, and generates authentication responses outside the firewall, enhancing security and processing speed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If user data is shared outside the firewall for validation, then data validation can be performed, but the data becomes vulnerable to interception and interpretation by bad actors

Engineering Contradiction:
Improvedata validationVSAvoiddata interception risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system segments user data into multiple logical data components before transmission outside the firewall. Each component represents a portion of the original data, and when combined, they reconstruct the complete information. This segmentation ensures that if one component is intercepted, the bad actor cannot interpret the full data without all other components.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system introduces unique identifiers as intermediary elements that replace actual user data during external transmission. These identifiers act as mediators between the internal system and external validation services, allowing validation to occur without exposing sensitive information to potential interceptors.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If data is obfuscated with unique identifiers before transmission, then data security is improved, but processing time may increase

Engineering Contradiction:
Improvedata securityVSAvoidprocessing time
Core Design Contradiction:
Object-affected harmful factorsVSLoss of time

Solution Approach 1:

The system performs data segmentation and unique identifier generation as preliminary actions before data leaves the firewall. By preparing the obfuscated data structure in advance, the system eliminates the need for complex real-time processing during external validation, thereby minimizing additional processing time while maintaining security.

Inventive Principle:
Principle #10Preliminary action

3Loss of information

If the internal entity server requests third-party applications outside the firewall for validation, then data enrichment can be performed, but the interaction process becomes more complex

Engineering Contradiction:
Improvedata enrichmentVSAvoidinteraction process complexity
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The system extracts only the essential validation requirements and translates them into requests for third-party applications outside the firewall. By taking out only the necessary validation functions and performing them externally with obfuscated data, the system achieves data enrichment without requiring complex internal processing architecture.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS12513144B2System and method for validating an interaction
Publication Date: 2025.12.30 BANK OF AMERICA CORP
  • US12513144B2 patent drawing
  • US12513144B2 patent drawing

AI summary

A method is provided that includes receiving a request to perform an interaction that includes user data and device data. The method includes splitting the user data into one or more logical data components. The method includes comparing the one or more logical data components to one or more predetermined validation thresholds. The method includes determining whether the one or more logical data components satisfy the one or more predetermined validation thresholds. In response to determining that the one or more logical data components satisfy the one or more predetermined validation thresholds, the method includes obfuscating the one or more logical data components to generate one or more unique identifiers, and obfuscating the device data to generate a unique device identifier. The method includes generating an authentication response configured to authorize the external entity server to perform the interaction that includes the unique identifiers and unique device identifier.