Structured Encryption Rules Engine for Sensitive Data Queries
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing rules engines struggle to process sensitive data without decrypting it, as encryption prevents them from taking actions based on encrypted data.
Innovation Solution
Implementing a structured encryption rules engine that uses query tokens generated from symmetric keys to query encrypted data without decrypting it, allowing actions to be taken based on encrypted data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted to maintain privacy, then data security is improved, but the ability to process and evaluate the data by rules engines deteriorates
Solution Approach 1:
The patent introduces an intermediary mechanism (structured encryption algorithm with query tokens) that enables the rules engine to interact with encrypted data without decryption. The query token acts as a mediator that carries evaluation criteria through the encryption layer, allowing the rules engine to evaluate encrypted data while maintaining security.
Solution Approach 2:
The patent changes the parameter state of the data from plaintext to structured encrypted format. This transformation allows the data to maintain security properties while acquiring new properties that enable evaluation - specifically, the encrypted data can now be queried using tokens generated from the encryption parameters without being decrypted.
2Reliability
If encryption is applied to sensitive data fields, then privacy protection is improved, but the ability to take actions based on data values deteriorates
Solution Approach 1:
The query token serves as an intermediary that bridges the gap between encrypted data and action-taking requirements. The token encapsulates the evaluation criteria and enables the rules engine to determine whether conditions are met and actions should be taken, all while operating on encrypted data.
Solution Approach 2:
The encryption process performs a preliminary action by structuring the encrypted data in a way that preserves evaluability. The structured encryption algorithm prepares the data beforehand so that future evaluations and actions can be performed without decryption, enabling productivity while maintaining privacy.
3Reliability
If data is kept in encrypted format, then security is improved, but the complexity of querying and evaluating the data increases
Solution Approach 1:
The patent segments the querying process into distinct components: token generation from encryption parameters, token-based querying of encrypted data, and evaluation based on query results. This segmentation makes the complex process of querying encrypted data more manageable and systematic.
Solution Approach 2:
The patent transforms the querying complexity from operating on plaintext values to operating on encryption parameters and tokens. By changing the parameters used for querying (from data values to encryption-derived tokens), the system maintains security while providing a structured approach to evaluation.
Data Source
AI summary
A rules engine that is running a rules-based application executing on a computing device comprising a processor device receives a first transaction that includes a plurality of data fields, at least some of the data fields including data to be evaluated by a plurality of rules identified in the rules-based application, the first transaction including encrypted data in a first encrypted data field of the plurality of data fields that has been encrypted with a symmetric key in accordance with a structured encrypted algorithm. The rules engine queries the encrypted data using a first query token generated using the symmetric key to determine if the encrypted data includes a value used in a first condition identified in the plurality of rules. The rules engine takes an action based at least in part on querying the encrypted data.