Anonymous Authentication Token for Web Service Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing web service systems face challenges in controlling access to user data when interacting with external services, as users may not trust these services with their personal information.
Innovation Solution
A method of anonymously authenticating a service user by generating a token that allows authorized actions without revealing personal information, enabling the user to perform actions on external services while preventing access to their personal data stored in the base web service system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a user logs into a side web service system using their login from the base web service system, then the user can access data associated with their account on the side web service system, but the side web service system gains access to personal information stored in the base web service system memory
Solution Approach 1:
The patent introduces an intermediary authentication mechanism where the base web service system issues authentication tokens to users who wish to access side web service systems. These tokens act as mediators that allow users to perform actions on external services without directly exposing their personal information stored in the base system's memory. The side web service system receives these tokens and uses them to authorize actions without accessing user data.
2Ease of operation
If the base web service system provides direct access to user data for external services, then data access is simplified, but user control over data sharing is reduced
Solution Approach 1:
The patent extracts the authentication and authorization logic from the user's personal data storage. Instead of providing direct access to user data, the system extracts only the necessary authentication information (tokens) and uses these to authorize actions on behalf of users. This separation allows simplified access while maintaining user control, as users can manage which actions are authorized without exposing their personal information.
3Adaptability or versatility
If existing authentication mechanisms are used, then user login to external services is enabled, but the side web service system can access data associated with the user account
Solution Approach 1:
The patent creates a copy of the authentication relationship rather than exposing the original data. The base web service system generates authentication tokens that copy the essential authentication function without containing actual personal information. These tokens can be used to authorize actions on side web service systems while the original user data remains protected in the base system's memory, inaccessible to external services.
Data Source
AI summary
A computer-implemented method of and a first web service system for anonymously authenticating a service user having an account associated with a first web service system are disclosed. The method is executable by a processor and comprises receiving an authentication request originating from a device of the service user, the authentication request comprising data identifying the account of the service user; generating, based on data relating to the account of the service user, a token comprising first data anonymously authenticating the service user and second data identifying an action that a second web service system is authorized to perform for the service user; storing, in a memory, at least one of the first and second data of the token; and transmitting the generated token to the second web service system. A computer-implemented method executable by a second web service system and a second web service system are also disclosed.