Cryptographic Authentication Authorization Segmentation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing cryptographic methods for data transactions on decentralized networks conflate authentication and authorization, leading to inefficiencies, security breaches, and inability to manage complex corporate authority structures.

Innovation Solution

The implementation of separate mechanisms for authentication and authorization in the cryptographic signing process, using cryptographically linked access tokens and key fragments to ensure secure and flexible transaction execution.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If authentication and authorization are conjoined in a single cryptographic process, then the system is simpler to implement, but security is compromised and complex corporate authority structures cannot be managed

Engineering Contradiction:

Improvecryptographic process complexityVSAvoidsecurity

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The patent divides the authentication and authorization processes into separate cryptographic operations. Authentication verifies the identity of the actor using digital signatures, while authorization validates the actor's right to perform the transaction using access tokens. This segmentation allows each process to be optimized independently and prevents security compromises that would result from conjoining them.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces access tokens as intermediary cryptographic objects that mediate between authentication and authorization. The access token contains authorization information and is verified separately from the authentication signature, allowing the system to maintain security while managing complex corporate authority structures without directly conjoining authentication and authorization processes.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If separate mechanisms for authentication and authorization are implemented, then security and flexibility are enhanced, but the system complexity increases

Engineering Contradiction:

ImprovesecurityVSAvoidcryptographic process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges the authentication and authorization processes at the transaction level by requiring both a digital signature (authentication) and access token validation (authorization) for transaction execution. This merging allows the system to enhance security and flexibility through separate mechanisms while presenting a unified interface to users and applications.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent creates a universal cryptographic framework that handles both authentication and authorization through standardized processes. The access token mechanism can represent various corporate authority structures (individuals, groups, entities) and can be applied across different transaction types, reducing overall system complexity despite the separate mechanisms.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Adaptability or versatility

If private keys are shared among multiple individuals for entity transactions, then operational flexibility is improved, but accountability is lost and security breaches increase

Engineering Contradiction:

Improveoperational flexibilityVSAvoidsecurity breaches

Core Design Contradiction:

Adaptability or versatilityVSObject-generated harmful factors

Solution Approach 1:

The patent segments the cryptographic verification process into authentication (verifying the signer's identity via digital signature) and authorization (verifying the right to act via access token). This allows multiple individuals to operate entity transactions without sharing private keys, as each individual's authentication is separately verified and their authorization is validated through access tokens, preventing security breaches while maintaining operational flexibility.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent replaces the mechanical key-sharing system with a cryptographic substitution system using digital signatures and access tokens. Instead of physically or digitally sharing private keys among multiple individuals, the system uses public key infrastructure where each individual signs transactions with their own private key, and authorization is granted through cryptographic access tokens that validate their right to act on behalf of the entity.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS20250158833A1Method, apparatus, and computer-readable medium for authentication and authorization of networked data transactions

Publication Date: 2025.05.15 SECURRENCY INC

AI summary

A method and apparatus for cryptographically linking separated authentication and authorization processes to support data transaction signing when group or corporate authority structures are required. The apparatus provides a secure, scalable model to represent authority in an entity context while conducting distributed ledger technology transactions. The method supports a range of cryptographic methods for separating the linked authentication and authorization processes including split key encryption, multi-party computation, multi-signature authorization, and execution of decentralized smart contract authorization logic. The method supports multiple models for authorization including organizational structures, consensus models including voting, and workflow processes.