Cross-Account Device Sharing via Cloud Trusted Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The cumbersome operation of manually scanning a two-dimensional code or entering a PIN code for device trusted authentication during device sharing between users with different accounts leads to a subpar user experience.
Innovation Solution
A device sharing method and system that utilizes a cloud server to transmit trusted authorization information between devices, allowing seamless authentication based on device security credentials without manual input, enabling trusted connections between devices with different accounts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If device sharing is enabled between accounts, then resource utilization efficiency is improved, but security risks increase due to potential unauthorized operations and data leakage
Solution Approach 1:
The patent segments device sharing into different permission levels (full access, limited access, read-only) and different time periods. This allows resource utilization to be maintained while security risks are reduced by restricting access based on specific needs and durations, preventing unauthorized operations while enabling legitimate sharing.
Solution Approach 2:
The patent introduces a server as an intermediary that manages and monitors all device sharing operations. The server authenticates users, controls permission levels, logs all operations, and can terminate sessions. This intermediary layer enables secure resource sharing by mediating between resource owners and users, preventing direct unauthorized access while maintaining efficient resource utilization.
2Reliability
If device sharing is restricted to enhance security, then security risks are reduced, but resource utilization efficiency deteriorates
Solution Approach 1:
The patent implements dynamic permission management where access rights can be adjusted in real-time based on user needs and security requirements. Permission levels can be changed during the sharing session, allowing the system to adapt between security and utilization needs. This dynamic approach resolves the contradiction by enabling flexible security control that doesn't permanently restrict resource availability.
Solution Approach 2:
The patent changes key parameters of device sharing including permission levels, time duration, and operation types. By adjusting these parameters, the system can optimize for either security or resource utilization depending on the situation. For example, read-only permission with time limits maintains security while still enabling resource utilization, resolving the contradiction between the two opposing requirements.
3Productivity
If device sharing duration is extended to improve utilization, then resource utilization efficiency is improved, but the risk of unauthorized operations increases
Solution Approach 1:
The patent implements periodic review and automatic termination of device sharing sessions. Sharing permissions are granted for specific time periods rather than indefinitely, and the system periodically reviews active sessions to ensure continued authorization. This periodic approach enables extended utilization when needed while limiting the window of exposure to unauthorized operations, resolving the contradiction between utilization duration and security risk.
Solution Approach 2:
The patent incorporates continuous monitoring and feedback mechanisms that track device sharing operations in real-time. The system provides feedback on usage patterns, detects anomalies, and can automatically terminate sessions when unauthorized operations are detected. This feedback loop enables extended sharing duration to improve utilization while maintaining security by actively monitoring and responding to potential threats throughout the sharing period.
Data Source
Figure 1A
Figure 1B-1
Figure 1B-2
AI summary
Embodiments of this application disclose a device sharing method and system, a device, and a computer-readable storage medium. The system includes a first device, a cloud server, a second device, and a third device. A first account is logged in on the first device and the second device, and a second account is logged in on the third device. The first device sends a target message to the cloud server in response to an operation of sharing the second device with the second account, so that the cloud server transmits first trusted authorization information to the second device and transmits second trusted authorization information to the third device. The first trusted authorization information includes a device security credential of the third device, and the second trusted authorization information includes a device security credential of the second device. The second device and the third device perform device trusted authentication based on the device security credential of the peer device. In this way, the second device and the third device may perform trusted authentication on the device with the different account based on the device security credential, and do not need to perform authentication by entering a PIN code or scanning a code. An operation is simple, and user experience is better.