Cloud Account Linking via Asymmetric Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for sharing data assets, such as documents and photos, through cloud services lack robustness and security, particularly in enabling collaborative editing and secure, end-to-end encryption across different devices and platforms.
Innovation Solution
An OS-level framework on devices provides customizable sharing functionalities, graphical user interface constructs, and application programming interfaces (APIs) for secure data sharing through cloud services, utilizing asymmetric encryption with public-private key pairs and key diversification to ensure only authorized users can access and edit shared data assets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is shared through cloud storage with collaborative editing, then multiple users can simultaneously view and edit the same document, but security and access control become more complex
Solution Approach 1:
The patent segments security management by creating separate key pairs for each user (public key and private key). Each user's data is encrypted with their public key, and only they can decrypt it with their private key. This segmentation of cryptographic keys simplifies the overall security architecture while enabling collaborative access.
Solution Approach 2:
The system performs preliminary encryption actions by encrypting data with the recipient's public key before transmission or storage. This preliminary cryptographic action ensures that only the intended recipient can decrypt and access the data, establishing security before the actual data sharing occurs.
2Reliability
If end-to-end encryption is implemented for secure data sharing, then data privacy is improved, but key management and user authentication become more complex
Solution Approach 1:
Each user generates their own public-private key pair and manages their own cryptographic keys. The system provides the infrastructure for key generation and storage, but each user is responsible for their own key management. This self-service approach to cryptography simplifies the overall system architecture while maintaining strong security.
Solution Approach 2:
The patent employs asymmetric cryptography where public keys and private keys have different functions and properties. Public keys are used for encryption and can be freely shared, while private keys are used for decryption and must be kept secret. This asymmetry in key functionality enables secure data sharing without requiring complex key exchange protocols.
3Ease of operation
If communication addresses are associated with cloud service accounts, then data sharing is simplified, but user privacy may be compromised
Solution Approach 1:
The patent introduces cryptographic keys as an intermediary layer between communication addresses and user identities. Instead of directly linking addresses to accounts, the system uses public keys as mediators that enable data sharing without revealing the underlying address-to-account relationships. This intermediary cryptographic layer preserves user privacy while facilitating easy data sharing.
Data Source
AI summary
Some embodiments provide a method for an electronic device. The method receives, through a communication address, an invitation to access a shared data asset via a cloud services platform. When the communication address is not associated with any account on the cloud services platform, the method identifies whether the device is associated with a cloud services account. When the device is associated with a cloud services account, the method prompts for input of a password for the cloud services account in order for the communication address to be associated with the cloud services account and for access to be enabled to the shared data asset.