Web Input Field Confidential Data Masking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Organizations face challenges in automatically masking confidential information, such as credit card numbers, on webpages without explicit user configuration, to comply with PCI DSS standards during web session recording.
Innovation Solution
A method and system that analyze input text in webpage input fields to identify masking information using algorithms like the Luhn algorithm and DOM attributes, automatically masking sensitive data before recording, without requiring explicit user configuration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If automatic masking of confidential information is implemented without explicit user configuration, then compliance with PCI DSS standards is improved, but device complexity increases due to the need for analysis algorithms and masking mechanisms
Solution Approach 1:
The system performs preliminary analysis of input text to identify masking information before the recording process begins. By detecting confidential information patterns (such as credit card numbers) in advance and applying masking algorithms prior to storage, the system ensures PCI DSS compliance is built into the data handling pipeline rather than added as a separate compliance layer.
Solution Approach 2:
The masking system operates autonomously without requiring explicit user configuration or intervention. The analysis algorithms automatically detect masking information in input fields, and the masking mechanism self-applies the appropriate obfuscation based on predefined patterns and algorithms, reducing the operational burden on users while maintaining compliance.
2Object-affected harmful factors
If masking information is automatically detected and masked in input fields, then security against unauthorized access is improved, but ease of operation deteriorates due to the automated analysis and masking processes
Solution Approach 1:
The system provides self-service masking where the analysis algorithms automatically detect and mask confidential information without requiring user awareness or manual intervention. Users simply input data as usual, and the system autonomously identifies patterns (such as credit card number formats) and applies masking, maintaining ease of use while enhancing security.
Solution Approach 2:
The masking mechanism acts as an intermediary between the user input and the recorded data. It intercepts the input text, analyzes it for confidential patterns, and transforms it into masked form before storage, thereby protecting against unauthorized access without interfering with the user's natural interaction with the system.
3Measurement precision
If input text is analyzed to identify masking information using algorithms like Luhn algorithm, then measurement precision of confidential data detection is improved, but use of energy increases due to the computational analysis process
Solution Approach 1:
The system applies masking algorithms selectively only to input fields that contain potential masking information, rather than analyzing all data uniformly. By detecting patterns (such as credit card number formats) and applying the Luhn algorithm only when necessary, the system maintains high measurement precision for confidential data detection while minimizing unnecessary computational energy consumption.
Data Source
AI summary
A method for recording input text that is input in an input field of a webpage, the method comprising: providing the webpage to a client device, by processing circuitry, the webpage comprising: (a) the input field, and (b) instructions executable by web-accessing software for recording the input text; and wherein execution of the instructions results in: identification of masking information in the input text, if any, the masking information being information in the input text to be masked; and if the masking information is identified, masking of the masking information prior to the recording of the input text, so that the masking information is masked when recorded.