Access Token Parameter Encryption for Device-Specific Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption methods for access tokens become vulnerable when multiple parties need access, as sharing a single decryption key increases the risk of key loss and unauthorized access.
Innovation Solution
Implementing an access token system that encrypts different data portions with unique encryption keys for each computing device, allowing only authorized devices to decrypt specific parts of the token, and using single-use tokens to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single decryption key is shared among multiple parties for accessing encrypted data, then all parties can access the encrypted data, but the risk of key loss and unauthorized access increases
Solution Approach 1:
The patent segments the decryption capability by dividing the encrypted data into multiple portions, each protected by a different encryption key. Each party receives only the decryption key for their specific data portion, not all keys. This resolves the contradiction by enabling each party to access their needed data (ease of operation) while preventing any single party from accessing all data or compromising all keys (key security).
Solution Approach 2:
The patent applies local quality by giving each party different decryption capabilities tailored to their specific needs. Instead of providing universal access keys to all parties, each party receives a decryption key that is locally optimized for their specific data portion. This allows selective access (ease of operation) while maintaining security for other portions (key security).
2Reliability
If multiple encryption keys are used for different data portions, then key security is improved and unauthorized access is prevented, but system complexity increases
Solution Approach 1:
The patent manages complexity by segmenting the encryption system into independent key-data pairs. Each encryption key is tied to a specific data portion and party, creating modular units that are easier to manage than a single complex key system. This segmentation reduces the operational complexity of key management while maintaining high security (reliability).
Solution Approach 2:
The patent extracts the decryption key management from a centralized shared model and distributes it to individual parties. Each party holds only their specific decryption key locally, eliminating the need for complex key distribution and management infrastructure. This extraction simplifies the system (reduces device complexity) while improving security (reliability) by removing single points of failure.
3Ease of operation
If access tokens are reusable, then convenience is improved, but security risk increases due to potential unauthorized use
Solution Approach 1:
The patent implements dynamic token validity by making access tokens time-limited and single-use. Tokens automatically expire after a specific duration or after one use, preventing indefinite reuse. This dynamic approach maintains security (reduces unauthorized access risk) while preserving convenience (ease of operation) by allowing legitimate users to access data when needed within the valid time window.
Data Source
AI summary
The technology is directed to a system for separately encrypting parameters of an access token. The system may receive a request for an access token and may determine computing devices for receiving the access token and sets of parameters that each computing device is to access. The system may identify encryption keys associated with the computing devices. Each computing device may store a corresponding decryption key for decryption a corresponding set of parameters. The system may encrypt each set of parameters using a corresponding encryption key to generate encrypted sets of parameters. The system may generate the access token by adding the encrypted sets of parameters to the access token. The system may then transmit the access token to a requesting device.