Transient Token Data Analysis for GDPR-Compliant Personalization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in securely collecting, storing, and analyzing sensitive information while complying with regulations like GDPR, which require de-identification and secure handling of personal data, especially in the context of social media platforms.
Innovation Solution
A system utilizing transient tokens is employed to access and analyze sensitive information without storing it in a database managed by the entity, involving a request server, de-identification server, and analytic server, where unique tokens are generated and matched to retrieve de-identified data, ensuring secure and compliant data handling.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sensitive information is stored in a database managed by the entity, then data analysis and personalized content delivery can be performed, but security risks and compliance with data protection regulations deteriorate
Solution Approach 1:
The system segments the data processing workflow into distinct components: data collection, de-identification, storage, and analysis. Each component performs a specific function, with de-identification occurring before storage to separate identifiable information from stored data, thereby improving security while maintaining manageable system complexity through clear functional boundaries
Solution Approach 2:
The patent introduces transient tokens as an intermediary mechanism between the application server and the de-identified data server. These tokens enable secure data retrieval and analysis without exposing sensitive information, acting as a mediator that maintains security protocols while facilitating necessary data access for personalized content delivery
2Reliability
If de-identification is implemented to comply with GDPR, then data protection compliance improves, but the ability to perform accurate data analysis deteriorates
Solution Approach 1:
The system changes the parameters of data representation by transforming identifiable information into de-identified form through tokenization. This parameter change allows the data to maintain its analytical utility while meeting compliance requirements, as the de-identified data retains statistical properties necessary for analysis without containing personally identifiable information
3Reliability
If transient tokens are used to access de-identified data, then security against unauthorized access improves, but the complexity of data access procedures deteriorates
Solution Approach 1:
The transient token system implements self-service security mechanisms where the system automatically generates, manages, and validates tokens without requiring manual intervention. This automation maintains high security standards while keeping operational complexity manageable, as the token management process is handled autonomously by the system infrastructure
Data Source
AI summary
A computer-implemented method includes a request server receiving data representing identification data from an application server and assigning a transient token to the received identification data. The request server initiates transmission of the identification data and the assigned transient token to a de-identification server. The de-identification server generates a unique token from the identification data and initiates transmission of the generated unique token and the assigned transient token to a de-identified data server. The de-identified data server receives data representing sensitive information corresponding to the identification data and initiates transmission of the received sensitive information and the assigned transient token to an analytic server. The analytic server initiates transmission to the request server requested content attained from the received sensitive information and the transient token. The request server initiates transmission to the application server the attained requested content based on the transient token being received at the request server.