Access Server for User Data Privacy Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Users are unaware of which data is stored in communication networks and how it is utilized, posing challenges with tightened legislation regarding personal and privacy data.

Innovation Solution

A method and system involving an access server that receives user data requests, determines the relevant data storage, generates inquiries to retrieve user data, and responds with the data, allowing users to manage their data by controlling access and permissions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If servers and databases store user related data for service utilization, then service functionality is improved, but user awareness and control over their data is lost

Engineering Contradiction:
Improveservice functionalityVSAvoiduser awareness of data
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

The patent introduces an access server as an intermediary component between users and the distributed data storage system. This access server manages user authentication, tracks which services access which user data, and enforces access permissions. By inserting this intermediary layer, the system maintains service functionality while restoring user awareness and control through centralized management of data access rights.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If multiple services access user related data stored in data storages, then service capability is improved, but user privacy control and security management becomes complex

Engineering Contradiction:
Improveservice capabilityVSAvoidaccess management complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent merges multiple data storage locations into a unified access management system. Instead of each service independently managing access to distributed databases, all data access requests are routed through a single access server that maintains a centralized view of user data locations and access permissions. This consolidation simplifies the complexity of managing multiple service accesses across multiple storage locations.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The access server is designed as a universal component that handles multiple functions: authentication, authorization, data location tracking, and access permission management. This multi-functional design allows a single system to manage access for multiple services across multiple data storages, reducing the need for separate management mechanisms for each service-storage pair.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Speed

If user data is stored in distributed data storages for service use, then data accessibility is improved, but compliance with privacy legislation becomes difficult

Engineering Contradiction:
Improvedata accessibilityVSAvoidprivacy compliance
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The access server implements feedback mechanisms by tracking and logging all data access requests, maintaining records of which services accessed which user data and under what permissions. This feedback capability enables the system to provide audit trails required for privacy legislation compliance while maintaining fast data accessibility through the distributed storage architecture.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11316949B2Access management to user related data
Publication Date: 2022.04.26 TELIASONERA AB
  • US11316949B2 patent drawing
  • US11316949B2 patent drawing
  • US11316949B2 patent drawing

AI summary

Disclosed is a method for managing user related data by an access server, the method includes: receiving a request of a user related data; determining data storage storing the user related data; generating an inquiry to the determined data storage for receiving the user related data; in response to a detection that the data storage is granted a right to provide the user related data to the access server receiving the user related data; and generating a response to the system of the service provider, the response including the user related data. Also disclosed is an access server and a computer program product.