STTR Phase I: Building a Trustworthy Cyberspace through Data Security as a Service

此小型企业技术转移（STTR）第一阶段项目的更广泛影响/商业潜力在于防止影响医疗保健、金融和其他企业的数据泄露，特别是第三方开发人员对基于云的系统的泄露。使用拟议的技术，企业可以更快地创新——利用云计算和应用程序市场存储，而不会泄露数据——而第三方开发人员可以销售应用程序，以改善公民的健康和财务状况，而不会受到法规和合规的影响。这项技术将通过保护数据和在几周内部署的新应用程序而不是几年来刺激创新。这个小型企业技术转移（STTR）第一阶段项目在控制数据方面开辟了新的领域，因为它被不受信任的应用程序使用，并使安全应用程序更容易构建。具体来说，企业可以通过使用所建议的技术来控制对其数据的访问，从而确保使用中的数据不会泄露给意外的接收者。目前，加密和HIPAA合规性只能保护静态或传输中的数据，但大多数数据泄露都发生在数据使用时。对于开发人员来说，该技术提供了一种应用程序设计模式，可以扩展到大型应用程序，并且不需要安全专业知识来进行开发。因此，开发人员可以快速迭代功能，而不是将时间浪费在安全法规上，而是专注于提供最佳的医疗保健和经济效益。总之，拟议的创新对于释放指数级增长的云和应用市场的潜力至关重要。

The broader impact/commercial potential of this Small Business Technology Transfer (STTR) Phase I project lies in protecting against data breaches that affect healthcare, financial, and other enterprises, especially breaches on cloud-based systems due to third-party developers. Using the proposed technology, enterprises can innovate faster - utilizing cloud computing and application market stores without exposing data to breaches - while third-party developers can sell applications to improve citizens' health and finances without being slowed down by regulations and compliance. The technology will spur innovation by securing data and through new applications that are deployed within weeks instead of years.This Small Business Technology Transfer (STTR) Phase I project breaks new ground in controlling data as it is used by untrusted applications and in making secure applications easier to build. Specifically, an enterprise can control access to their data through use of the proposed technology, which ensures that data in use cannot be leaked to an unintended recipient. Currently, encryption and HIPAA compliance only protect data at rest or in transit - but most breaches are when data is in use. For developers, the technology provides an application design pattern that scales to large applications and does not require security expertise to develop for. Hence, developers can iterate on functionality quickly and instead of wasting time with security regulations, focus on providing the best healthcare and financial benefits possible. In summary, the proposed innovation is crucial to unlocking the potential of exponentially growing cloud- and application-markets.