Alternate Authorization Credential for Data Retrieval Constraints

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Sharing primary authorization credentials with third-party systems for data access can lead to security concerns and resource strain on data centers, resulting in delayed responses for direct users accessing their data records.

Innovation Solution

A system and method for managing a data request interface that generates an alternate authorization credential with data retrieval constraints, which is used by a second client device, allowing controlled data operations while minimizing resource usage and reducing security risks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If primary authorization credentials are shared with third-party systems for data access, then data access capability is improved, but security risk increases

Engineering Contradiction:

Improvedata access capabilityVSAvoidsecurity risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent segments authorization credentials into two distinct types: primary credentials for direct users and alternate credentials for third-party systems. This segmentation allows each credential type to have specific access permissions and constraints, enabling third-party access while maintaining security by limiting what alternate credentials can access and how they can be used.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary credential management system that acts as a mediator between primary users and third-party systems. This intermediary generates and manages alternate authorization credentials, controlling third-party access without exposing primary credentials. The intermediary enforces data retrieval constraints and monitors resource usage, thereby enabling data access capability while mitigating security risks through controlled mediation.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Productivity

If third-party systems access data records directly, then data analysis capability is improved, but resource strain on data center increases

Engineering Contradiction:

Improvedata analysis capabilityVSAvoidresource strain

Core Design Contradiction:

ProductivityVSUse of energy by moving object

Solution Approach 1:

The patent applies partial action by implementing data retrieval constraints that limit the scope, frequency, and volume of data access by third-party systems. Alternate credentials are configured with specific constraints that allow necessary data analysis capability while preventing excessive resource consumption. The system permits only the minimum necessary data access required for third-party analysis functions.

Inventive Principle:

Principle #16Partial or excessive action

Solution Approach 2:

The patent implements feedback mechanisms that monitor resource usage by third-party systems accessing data records. The credential management system tracks and analyzes resource consumption patterns, enabling dynamic adjustment of data retrieval constraints. When resource strain is detected, the system can modify constraints to balance third-party data analysis capability with data center resource availability, ensuring sustained productivity without excessive strain.

Inventive Principle:

Principle #23Feedback

3Adaptability or versatility

If third-party systems use primary credentials, then data retrieval flexibility is improved, but response time for direct users deteriorates

Engineering Contradiction:

Improvedata retrieval flexibilityVSAvoidresponse time

Core Design Contradiction:

Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent segments user access into distinct categories with dedicated credential types. Direct users authenticate with primary credentials that provide immediate, high-priority access to data records. Third-party systems use alternate credentials that are subject to controlled access mechanisms. This segmentation ensures that third-party data retrieval operations do not interfere with or delay direct user access, maintaining fast response times for primary users while still providing flexibility for authorized third-party retrieval through the constraint-based alternate credential system.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS11615212B2Systems and methods for managing a data request interface

Publication Date: 2023.03.28 THE TORONTO DOMINION BANK

AI summary

A computer system and method for managing a data request interface. The system includes a memory associated with the data request interface and coupled to a processor. The memory includes processor-executable instructions of the method for managing the data request interface. The method includes: receiving, from a first client device, a first signal including a primary authorization credential associated with a data record and a second signal including a request to generate an alternate authorization credential for use by a software module. The alternate authorization credential is associated with data retrieval constraints. The method includes generating the alternate authorization credential and configuring the data request interface to impose the data retrieval constraints for constraining data operations on the data record upon receipt of the alternate authorization credential. The method further includes sending, to the first client device or a second client device, a third signal including the alternate authorization credential.