Selective XML Tag Encryption for Secure Web Display

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing XML security technologies encrypt entire data, making it impossible to view XML documents as web documents and limiting partial encryption capabilities, which exposes data when viewing source code.

Innovation Solution

A method that allows selective encryption of data within XML documents while maintaining the XML tag structure, enabling partial encryption and secure data display on web browsers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional XML security technology encrypts the entire data in the XML document, then data security is improved, but the encrypted data cannot be viewed in the form of a web document in the web browser

Engineering Contradiction:
Improvedata securityVSAvoidweb document viewing capability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent segments the XML document into multiple tags, allowing selective encryption of only specific tags that contain sensitive data. This segmentation enables partial encryption rather than encrypting the entire document, thus maintaining web document viewing capability for non-encrypted portions while securing sensitive information.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies different quality treatments to different parts of the XML document. Specifically, it encrypts only the content of selected tags locally while leaving other tags and their content in plaintext format. This local quality approach ensures that data security is improved for sensitive information while the overall document remains viewable as a web document.

Inventive Principle:
Principle #3Local quality

2Reliability

If conventional XML security technology encrypts the entire data in the XML document, then data security is improved, but partial encryption capability is lost

Engineering Contradiction:
Improvedata securityVSAvoidpartial encryption capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent divides the XML document into discrete tags that can be independently selected for encryption. This segmentation provides adaptability by allowing users to choose which specific tags require encryption based on their security requirements, rather than forcing encryption of the entire document or providing no encryption option.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements partial encryption by encrypting only the necessary portions of the XML document (specific tags containing sensitive data) rather than applying excessive encryption to the entire document. This partial action approach provides versatility by allowing flexible selection of encryption scope.

Inventive Principle:
Principle #16Partial or excessive action

3Difficulty of detecting and measuring

If the View Source option of the XML document is selected, then data inspection capability is improved, but data security deteriorates as data is exposed on the web browser

Engineering Contradiction:
Improvedata inspection capabilityVSAvoiddata security
Core Design Contradiction:
Difficulty of detecting and measuringVSReliability

Solution Approach 1:

The patent applies encryption to sensitive data tags before the document is displayed in the web browser. This preliminary action ensures that even when users select the View Source option, they only see encrypted data instead of plaintext sensitive information, thereby maintaining data security while preserving the ability to inspect the document structure.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11770367B2Security method of XML web document
Publication Date: 2023.09.26 3KSOFT
  • US11770367B2 patent drawing
  • US11770367B2 patent drawing
  • US11770367B2 patent drawing

AI summary

According to an embodiment, there is provided a security method of XML web document, and in particular, a method of encrypting a tag set by a user when generating an XML document to display data contents of the encrypted tag as a web document. The security method of XML web document includes setting, by the processor, an encryption tag to be encrypted according to setting of a user; generating, by the processor, an XML document including the encryption tag based on data input by the user; retrieving, by the processor, the set encryption tag of the XML document; and generating, by the processor, an encrypted text for data corresponding to the encryption tag and outputting the encrypted text on a View window, and a plain tag format and the encryption tag format are maintained as they are and displayed on the View window, and only the data corresponding to the encryption tag is displayed on the View window as the generated encrypted text.