User-Controlled Data Copy for Deletion and Service Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack simplicity and user control over managing user data, particularly in changing service providers, and the processes for invoking user rights such as the right to be forgotten are complex and often result in incomplete or incorrect data deletion.
Innovation Solution
A computer-implemented method allowing users to create a second database under their control, enabling them to manage and transfer their data freely between databases, with options for encryption, format selection, and integration with other databases.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users request deletion of their data from a service provider's database, then user privacy and security are improved, but users lose access to their own data and cannot easily transfer it to another provider
Solution Approach 1:
The system creates a user-controlled copy of the data in a second database before deletion from the first database. This copy allows users to retain access to their data while enabling secure deletion from the service provider's database, thus resolving the contradiction between security and data transferability.
Solution Approach 2:
The second database acts as an intermediary between the user and the first database. It serves as a temporary holding location that enables users to control their data after deletion requests, facilitating both secure deletion and potential data transfer without direct access to the original database.
2Reliability
If service providers manually handle data deletion requests, then data security is maintained through controlled access, but the process becomes complex and error-prone
Solution Approach 1:
The system enables self-service data management by allowing users to control their own data through the second database. Users can independently manage their data copies, transfer them, or restore them without requiring complex service provider intervention, thus simplifying the deletion process while maintaining security.
Solution Approach 2:
The data management system is segmented into two separate databases with distinct access control mechanisms. The first database maintains service provider control for active service delivery, while the second database provides user control for post-deletion management, dividing the complex deletion process into manageable, independent components.
3Adaptability or versatility
If users want to change service providers, then user freedom and adaptability are improved, but users must manually re-enter their data which is time-consuming and error-prone
Solution Approach 1:
The system maintains a user-controlled copy of the data in the second database that can be easily transferred to new service providers. This eliminates the need for manual data re-entry by providing ready-to-use data copies that users can share with new providers, significantly reducing time and effort.
Solution Approach 2:
The system prepares user data in advance by creating and maintaining it in the user-controlled second database before any service provider change occurs. This preliminary preparation ensures that data is readily available for immediate transfer to new providers, eliminating the need for time-consuming re-entry processes.
4Reliability
If complete deletion of user data is implemented, then user privacy rights are protected, but users cannot restore their data if they change their mind or need it for future use
Solution Approach 1:
The system creates a preservable copy of user data in the second database before deletion from the first database. This copy serves as a safety net that allows users to restore their data if needed, while the actual deletion from the first database maintains privacy protection. The copy can be deleted separately when users are certain they no longer need it.
Solution Approach 2:
The system provides a cushioning mechanism by maintaining a user-controlled copy of the data in the second database before complete deletion occurs. This cushion allows users to recover from hasty deletion decisions or unexpected needs without compromising the privacy-protecting deletion from the first database, enabling safe restoration if users change their minds.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Users (or consumers) make increasing use of services which result in the storage of their user data. Legislation confers a number of rights on users to control how their user data is used, such as a right to be forgotten (right to erasure), but the processes to invoke these rights are complex. In addition, when a user wishes to change service providers, they usually have to manually provide at least part of their user data themselves. It is an object of the invention to provide simpler and easier processes for users to control how their user data is managed. A computer-implemented method 200 is provided for removing access to data, comprising: receiving 304 a request from the user 102 to delete the user data; suspending control 306 of the user data; generating 216 a second database 214 comprising the user data under full control of the user; deleting 312 the user data from the database; and, on request reintegrating the user data 108 into the same database or integrating into a further database 202. By providing a database under complete control of the user and outside the control of any database manager or service provider, users are given more freedom to decide what to do with their data. They can choose to protect it, or to monetise it themselves by selling it or licencing it. They can also create a plurality of copies, allowing sales to more than one database manager or service provider.