Access Token Authorization for Secure Data Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In asset management systems like IBM Rational® Asset Manager, users other than the asset creator often lack permission to access data repositories, making it difficult to share summary information related to assets stored in different repositories without exposing sensitive credentials.
Innovation Solution
The system uses an access token generated by the asset creator, authenticated with the target repository, to authorize users to access summary information, leveraging OAuth for secure communication between servers and eliminating the need for sharing credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users are granted direct access to data repositories to share summary information, then accessibility and ease of operation improve, but security and data protection deteriorate due to exposure of sensitive credentials
Solution Approach 1:
The patent introduces an access token as an intermediary mechanism that enables users to access summary information from data repositories without exposing sensitive credentials. The token acts as a mediator between the user and the repository, allowing authenticated access while keeping the actual credentials secure and hidden from end users.
Solution Approach 2:
The system segments access rights by separating credential management from information access. Instead of giving users direct repository access credentials, the system divides functionality into: (1) credential storage in secure asset management system, (2) token generation for authenticated users, and (3) token-based access to summary information. This segmentation allows ease of access while maintaining security.
2Loss of information
If direct repository access is provided for data sharing, then information accessibility improves, but system complexity increases due to credential management requirements
Solution Approach 1:
The asset management system automatically generates and manages access tokens without requiring manual credential distribution. The system self-services by: (1) automatically authenticating users against the data repository, (2) generating appropriate access tokens, and (3) managing token lifecycle including expiration and revocation. This eliminates the complexity of manual credential management while enabling information sharing.
3Object-affected harmful factors
If access tokens are implemented for secure data sharing, then security improves by reducing credential exposure, but device complexity increases due to token management mechanisms
Solution Approach 1:
The access token mechanism is designed to be universal and multi-functional, serving multiple security purposes within a single framework: (1) authentication verification, (2) authorization control, (3) session management, and (4) audit trail generation. By consolidating these functions into a single token-based system, the patent reduces overall system complexity compared to implementing separate mechanisms for each function.
Data Source
AI summary
Described is a system, whereby a creator of an asset at an asset management system selects an identifier corresponding to information related to the asset. The information is stored at a target repository. The asset creator is authenticated with the target repository. An authorization token is output to the asset management system for authorizing one or more users to access the information related to the asset.