Trust Computing Platform for Sensitive Data Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for controlling access to sensitive information in ubiquitous computing applications fail to integrate trust and privacy effectively, lacking a mechanism to quantify privacy breach probability and provide a trusted platform for secure data sharing, which can lead to severe consequences when private data is shared without adequate confidence in privacy preservation.
Innovation Solution
A processor-implemented information access control method and system that computes a trust score for consumers based on the probability of sensitive information privacy breach, using quasi-identifiers from auxiliary sources to evaluate the exploitation factor and potency of consumers, enabling negotiation and restricted sharing based on trustworthiness.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If sensitive information is shared with consumers in ubiquitous computing applications, then data utility and collaboration are improved, but privacy breach risk increases
Solution Approach 1:
The patent introduces a trusted computing platform as an intermediary between information owners and consumers. This platform includes a trust management module that computes trust scores and a negotiation module that mediates data sharing agreements. The intermediary verifies consumer trustworthiness and establishes binding contracts, thereby enabling data sharing while mitigating privacy breach risks through structured trust verification and negotiation protocols.
Solution Approach 2:
The patent implements preliminary trust assessment and negotiation before actual data sharing occurs. The trust management module pre-computes trust scores for consumers based on their credentials and behavior history. The negotiation module establishes data sharing agreements with specific terms and conditions before any sensitive information is transferred. This preliminary action ensures that only trusted consumers can access data, and the terms of sharing are predetermined to protect privacy.
2Reliability
If trust management mechanisms are implemented to protect privacy, then security is improved, but system complexity increases
Solution Approach 1:
The trusted computing platform is designed as a universal multi-functional system that can serve multiple information owners and consumers across different applications. The trust management module uses a standardized trust score computation framework that can evaluate various types of consumers (individuals, organizations, devices) using the same methodology. The negotiation module handles diverse data sharing scenarios through a unified contract framework. This universality reduces overall system complexity by avoiding the need for separate trust management systems for each application.
Solution Approach 2:
By centralizing trust management functions in a dedicated intermediary platform, the patent avoids distributing complex trust verification logic across all information owners and consumers. The intermediary platform consolidates the computation of trust scores, maintenance of trust databases, and execution of negotiation protocols in one location. This centralization simplifies the architecture by creating a single point of trust management rather than requiring each participant to implement their own complex verification systems.
3Measurement precision
If probability-based trust scoring is used to assess privacy breach risk, then decision accuracy is improved, but computational requirements increase
Solution Approach 1:
The patent transforms the abstract concept of trustworthiness into quantifiable parameters including trust scores, privacy breach probabilities, and exploitation factors. These parameters are computed based on observable consumer attributes such as credentials, behavior history, and data usage patterns. By changing trust assessment from a subjective qualitative judgment to an objective quantitative parameter system, the patent enables automated decision-making with measurable precision while using computationally efficient statistical methods rather than complex simulations.
Solution Approach 2:
The patent replaces manual or heuristic-based trust assessment with automated computational algorithms. The trust management module uses algorithmic computation to calculate trust scores and privacy breach probabilities based on input data about consumers. This substitution of automated computation for manual assessment improves consistency and precision while reducing the computational burden by using efficient algorithms rather than exhaustive analysis methods.
4Object-affected harmful factors
If information owners retain full control over sensitive data sharing, then privacy protection is improved, but data utility and collaboration efficiency deteriorate
Solution Approach 1:
The patent implements dynamic data sharing agreements through the negotiation module, which allows terms of data sharing to be adjusted based on trust scores and specific transaction contexts. Rather than static all-or-nothing sharing arrangements, the system enables flexible agreements where information owners can specify different levels of access, usage conditions, and time limits based on the consumer's trustworthiness. This dynamic approach optimizes the balance between privacy protection and data utility by adapting sharing terms to each specific interaction.
Solution Approach 2:
The patent enables information owners to segment their sensitive data into different categories and share specific subsets with different consumers based on trust levels and negotiation outcomes. Rather than treating all data uniformly, the system allows granular control where owners can permit sharing of certain data elements while restricting others. This segmentation increases data utility by allowing selective sharing without requiring complete data access or rejection, thereby improving collaboration efficiency while maintaining privacy protection.
Data Source
Figure 1
Figure 2
AI summary
A system and method enabling information access control of the sensitive information, based on a trust computing platform is provided. The trustworthiness of the information seekers is computed and accordingly the information owner is capacitated to decide upon sharing the information completely or sharing with some perturbation. The objective is to provide the information owner with the ability to decide on sharing its private data with respect to a parameter so that the decision is less subjective. This invention allows minimum leakage of sensitive data and makes information owner aware of the risk of privacy breach when private data is shared.