3D Data Permission Metadata for Controlled Sharing and Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The sharing of 3D modeling data via social networking services poses a risk to user privacy, as it may be used in ways not intended by the user, potentially infringing on their personal information.
Innovation Solution
A 3D data system comprising a server and client terminal with a service application that includes request transmitting, processing, and authentication means to manage and control the sharing and processing of 3D data sets based on user-defined restrictions, ensuring compliance with user-specified share and process restrictions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If 3D modeling data is shared via SNS, then data accessibility and social sharing capability are improved, but user privacy and data security deteriorate due to unauthorized use
Solution Approach 1:
The system performs preliminary authentication and authorization before allowing any data access or processing. The server verifies user credentials and checks permission flags in the metadata before executing operations, preventing unauthorized access before it can occur. This advance verification resolves the contradiction by enabling sharing only for authenticated users with proper permissions.
Solution Approach 2:
The server acts as an intermediary between users and their 3D data. Instead of direct peer-to-peer sharing that could lead to privacy violations, all data access requests must pass through the server which enforces authentication and authorization rules. This intermediary layer enables controlled sharing while preventing unauthorized use.
2Adaptability or versatility
If comprehensive processing permissions are granted for shared 3D data, then data usability and processing flexibility are improved, but risk of unauthorized processing and privacy violation increases
Solution Approach 1:
The system implements fine-grained permission control where different processing operations have different authorization requirements. The metadata contains specific permission flags for each type of operation (view, download, process, share), allowing the system to grant appropriate levels of access based on user credentials and data sensitivity, rather than using blanket permissions.
Solution Approach 2:
The server continuously verifies authorization credentials and permission flags during data processing operations. If a user attempts an operation beyond their authorized scope, the server rejects the request and can log the violation. This feedback mechanism ensures processing flexibility within authorized bounds while maintaining reliability through continuous compliance checking.
3Reliability
If detailed metadata including user identifiers is stored with 3D data, then data traceability and user control are improved, but data structure complexity and processing overhead increase
Solution Approach 1:
The metadata structure is segmented into distinct functional components: identification fields (user IDs, data IDs), permission fields (authorization flags for different operations), and timestamp fields (creation, sharing, access times). This segmentation allows the system to efficiently query and process specific metadata elements without being burdened by the entire metadata structure, reducing processing overhead while maintaining comprehensive user control.
Data Source
AI summary
A 3D data system includes: a storage means that stores a correspondence, for each of a plurality of 3D data sets, each including a data body representing 3D model, share restriction information describing restrictions on a scope for sharing the data body, the process restriction information describing restrictions on the processing of the 3D model, the correspondence being among the data identifier of the 3D data set, the user identifier of a user who is a subject in the data body included in the 3D data set, and a user identifier of another user who shares the 3D data set from the user; a request receiving means that receives a processing request including a user identifier from the service application; an authenticating means that authenticates the user who has made the request performs the processing; and a response transmitting means that transmits at least a part of the data body and at least a part of the processing limit information to the service application.