Caching Proxy for Access-Restricted Handle Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional caching approaches in digital object architecture (DOA) fail to efficiently cache handle data due to access restrictions, which require user authentication and authorization, leading to inefficiencies in accessing digital objects.
Innovation Solution
A proxy server is implemented to cache encrypted handle data while honoring access restrictions, using various caching models that ensure secure handling of encrypted data without decrypting it, including symmetric and asymmetric key techniques.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If conventional caching approaches are used for handle data, then caching efficiency is improved, but access restrictions cannot be honored and security is compromised
Solution Approach 1:
The patent introduces a proxy server as an intermediary between clients and handle registries. The proxy server caches encrypted handle data and uses public key infrastructure to verify client authorization without decrypting the cached data. This intermediary approach enables efficient caching while maintaining security through cryptographic verification of access rights.
2Reliability
If handle data is cached in encrypted form, then security is maintained, but access performance is reduced due to encryption/decryption overhead
Solution Approach 1:
The system performs preliminary encryption of handle data before caching, so that the encrypted form is stored in the cache. When a client requests handle data, the proxy server can serve the encrypted cached version directly if the client presents valid authorization credentials, avoiding real-time encryption/decryption overhead. The cryptographic verification happens in parallel with cache retrieval.
3Speed
If handle data is cached without encryption, then access speed is improved, but identifying information and PII are exposed
Solution Approach 1:
The patent changes the state of handle data from plaintext to encrypted form before caching. By transforming the data parameter (encryption status), the system achieves both fast cache retrieval and protection of sensitive information. The encrypted cached data can be served rapidly while the cryptographic encoding prevents exposure of identifying information and personally identifiable information.
Data Source
AI summary
A digital object architecture infrastructure includes a handle system that stores handle data and a proxy server that caches handle data for rapid access. A client connects to the proxy server to request access to the handle data. When the handle data does not have access restrictions and is currently cached, the proxy server returns the handle data to the client without accessing the handle system. When the handle data does not have access restrictions and is not cached, the proxy server obtains the handle data from the handle system, caches a copy of the handle data for future access, and provides the handle data to the client. The proxy server may cache encrypted handle data that is subject to access restrictions, cannot be decrypted by proxy server, and can be provided to a client determined to be allowed access. The client can then decrypt the encrypted handle data.