Transient Key Data Substitution for Secure Financial Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional database systems lack proper security for sensitive data during financial transactions, often resulting in unauthorized access and exposure of sensitive information in plain text format.
Innovation Solution
A method is introduced that involves receiving a request for a financial transaction with sensitive data and transient keys, selecting a suitable gateway for secure data transmission, replacing sensitive data with unique substitute data, and communicating this substitute data through a gateway adapter to ensure secure processing and storage, preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If sensitive data is transmitted in plain text format during financial transactions, then ease of operation and processing is improved, but security and protection of sensitive information deteriorates
Solution Approach 1:
The patent introduces an intermediary encryption layer between the transaction system and storage systems. Sensitive data is encrypted using transient keys before being written to persistent storage, and decrypted only when actively needed for transactions. This intermediary encryption mechanism allows the system to maintain operational efficiency while protecting sensitive data from unauthorized access during storage and transmission.
2Speed
If sensitive data is stored persistently in database systems, then data retrieval and access is improved, but security risks and exposure to unauthorized users increases
Solution Approach 1:
The patent changes the security parameter of stored data from plaintext to encrypted format using transient keys. The encryption state is maintained during persistent storage, and data is only decrypted temporarily when actively needed for transactions. This parameter change allows the system to maintain fast retrieval speeds for active transactions while ensuring security during persistent storage through encryption.
3Adaptability or versatility
If multiple transaction entities have access to sensitive data for processing, then transaction capability and versatility is improved, but risk of data misuse and unauthorized access increases
Solution Approach 1:
The patent applies preliminary encryption action to sensitive data before it is exposed to multiple transaction entities. The data is encrypted using transient keys that are generated and applied in advance of any transaction processing. This preliminary security measure ensures that even though multiple entities can access the data for processing, they can only access the encrypted form, preventing misuse while maintaining transaction versatility.
Data Source
AI summary
In accordance with embodiments, there are provided mechanisms and methods for facilitating secure communication of data during transactions across multiple transaction entities in database systems according to one embodiment. In one embodiment and by way of example, a method includes receiving a request to facilitate a financial transaction, wherein the request is received from an external computing device and includes sensitive data and one or more transient keys associated with a user, and selecting a gateway from multiple gateways to facilitate performance of the financial transaction, where the gateway is selected based on participation in securing of the sensitive data. The method may further include replacing, based on the one or more transient keys, the sensitive data with substitute data that is unique to the user, and communicating the substitute data to a gateway adapter to generate a file for the gateway, where the substitute data is communicated in lieu of the sensitive data, and converting the substitute data into the sensitive data.