Trusted Data Access Policy Enforcement for Confidential Data Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users are reluctant to trust applications with their confidential data due to the lack of transparency and enforcement of data privacy policies, and there is no effective means to protect data from unauthorized disclosure.
Innovation Solution
A data access device and method that enforces a data exposure policy using a Trusted Execution Environment (TEE) to ensure that data is anonymized, encrypted, and aggregated according to predefined policies, ensuring transparency and compliance with user-defined data handling rules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If users entrust applications with their confidential data, then data processing and sharing become possible, but users lose trust due to lack of transparency and risk of unauthorized disclosure
Solution Approach 1:
The patent introduces a Data Exposure Policy (DEP) as an intermediary mechanism between users and applications. The DEP acts as a mediator that defines and enforces data handling rules, allowing users to maintain control over their data while enabling applications to process it according to predefined policies. This resolves the trust issue by providing transparent, enforceable guidelines without restricting data processing capabilities.
Solution Approach 2:
The patent changes the parameter of data accessibility by introducing policy-based control mechanisms. Instead of unrestricted access, the system implements parameterized control where data exposure is governed by policies that can be configured according to user preferences. This allows the system to maintain both data processing versatility and user trust through configurable access parameters.
2Adaptability or versatility
If applications have access to user data, then service functionality is enhanced, but data security and privacy protection are compromised
Solution Approach 1:
The patent applies preliminary action by establishing Data Exposure Policies before data processing occurs. The policies are predefined and enforce data security requirements in advance, preventing unauthorized disclosure before it can happen. This allows applications to function fully while security constraints are already in place, eliminating the need to choose between functionality and security.
Solution Approach 2:
The system implements feedback mechanisms that monitor and enforce data handling compliance. The feedback loop ensures that applications adhere to the defined policies by providing continuous verification of data access and processing operations, thereby maintaining security without limiting functional capabilities.
3Reliability
If data is anonymized to protect user privacy, then data utility and analytical value are reduced, but user trust and security are improved
Solution Approach 1:
The patent applies local quality by implementing selective anonymization based on specific policy requirements. Different data fields and contexts have different anonymization levels - some data may be fully anonymized while other data remains accessible. This allows the system to maintain data utility where needed while providing security where required, avoiding blanket anonymization that would lose all data value.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention provides a data access device for enforcing a data policy comprising an input unit, a processing unit, a data exposure enforcement, DEE, unit and an output unit, wherein the data access device is configured to run in a trusted execution environment, TEE; the input unit is configured to receive a first data comprising a request for handling data, and a target identification, ID; the processing unit is configured to process the first data to attain a second data comprising the target ID and a data structure according to requirements of an application running in the data access device; the DEE unit is configured to manipulate the second data according to a data exposure policy, DEP, to attain a third data; and the output unit is configured to output the third data.