Client-Side Web Form Field Encryption with Local Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection methods, such as database encryption and secure protocols, do not adequately prevent unauthorized access to sensitive data, especially when authorized users have access to entire databases, and there is a need for more granular control over sensitive information within databases.
Innovation Solution
Implementing a system where sensitive data fields in web forms are encrypted using HTML encryption tags at the client level with user-specific encryption keys, which are stored locally and never sent to the server, providing an additional layer of security by encrypting data at both the client and server levels using transient keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If database files are encrypted as a whole, then protection from hackers is improved, but authorized users can still access the data and security granularity is lost
Solution Approach 1:
The patent divides the database into individual data fields that can be encrypted separately using HTML encryption tags. Each sensitive field (e.g., social security number, credit card number) is tagged individually, allowing granular encryption control. This enables authorized users to access only non-sensitive fields while sensitive fields remain encrypted, resolving the contradiction between overall database protection and fine-grained access control.
Solution Approach 2:
The patent applies encryption selectively to specific local regions (data fields) within the database rather than encrypting the entire database uniformly. By using HTML encryption tags on individual fields, the system provides different security levels for different data locations, allowing hackers to face encryption barriers while authorized users maintain access to non-sensitive areas.
2Reliability
If selective field encryption is implemented, then granular security control is improved, but system complexity increases
Solution Approach 1:
The patent implements a self-service encryption mechanism where the HTML encryption tags automatically identify and encrypt sensitive data fields without requiring manual intervention from database administrators. The system self-manages the encryption process by detecting tagged fields and applying encryption automatically, reducing the operational complexity despite the enhanced security granularity.
3Reliability
If user-specific encryption keys are used, then data security is improved, but key management complexity increases
Solution Approach 1:
The patent extracts the encryption key management function from the server and stores it locally in the web browser. User-specific encryption keys are generated and stored in the browser's local storage, eliminating the need for complex server-side key management. This extraction simplifies key management while maintaining strong user-specific encryption security.
4Reliability
If encryption is performed at client level, then security against server breaches is improved, but transmission overhead increases
Solution Approach 1:
The patent applies partial encryption by encrypting only the sensitive data fields that are tagged with HTML encryption tags, rather than encrypting all data transmitted between client and server. This selective approach provides security against server breaches while minimizing the overhead of encrypting and transmitting non-sensitive data in plain text.
Data Source
AI summary
Embodiments of the present invention include a computer system and computer program product for implementing encryption of data. A computer system determines that a first data field of a plurality of data fields of a web form requires encryption. The computer system tags the first data field with one or more HTML encryption tags. The computer system displays the web form to a user. The computer system receives user input, wherein at least a portion of the user input is contained in the first data field of the web form. The computer system encrypts the first data field on a first computer, wherein a first user specific encryption key is associated with at least the first data field. The computer system inserts the encrypted first data field into at least one record stored on a second computer.