Cross-Organization Data Transfer Control With Identity Approval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic data transfer methods between organizations face challenges such as information leakage, unauthorized data dissemination, spoofing, and unresolved data retention issues, particularly in cross-company transactions, which are exacerbated by remote working and varying legal regulations.
Innovation Solution
A method and system that verifies the identity of employees as data sources and destinations using unique document numbers, encrypts data, and requires approval from responsible personnel before transmission, ensuring secure and confidential data exchange through dedicated apps, with history management and deletion protocols for terminated employees.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If electronic data transfer is performed between organizations based solely on party determination, then data transfer efficiency is improved, but information leakage to unintended areas may occur
Solution Approach 1:
The patent introduces a unique document number as an intermediary element that bridges the sender and receiver organizations. This document number contains embedded information about both organizations and serves as a verification key, allowing efficient data transfer while preventing information leakage to unauthorized parties through cryptographic verification of the document number's authenticity
Solution Approach 2:
The patent performs preliminary verification of organizational authority and employee identity before data transfer occurs. The system validates the unique document number against registered organizational information in advance, ensuring that only authorized transfers are permitted while maintaining efficient processing through pre-validated credentials
2Reliability
If two-factor authentication (company authentication and member authentication) is used, then basic security is improved, but spoofing cannot be completely prevented and third parties may misrepresent their identity
Solution Approach 1:
The patent transforms the authentication parameters from simple company ID and employee ID to a cryptographically generated unique document number that embeds multiple verification layers. This document number serves as a composite credential that simultaneously verifies organizational authority, employee identity, and transfer authorization, making spoofing extremely difficult without the corresponding private key
Solution Approach 2:
The patent creates a composite authentication mechanism by combining multiple verification elements (organizational certificate, employee credentials, transfer authorization) into a single unique document number structure. This composite credential system provides multi-layered security where each component must be valid for the authentication to succeed, preventing spoofing by requiring possession of all corresponding secret keys
3Productivity
If data is transferred by employees with organizational authority, then data transfer capability is improved, but data may remain unintentionally on the other party's side after employee resignation
Solution Approach 1:
The patent implements a feedback mechanism where the organization that issued the unique document number can verify the current employment status of the employee and the existence of the data transfer. The system allows organizations to query and manage their issued document numbers, enabling them to revoke access or request deletion of data transfers when employees resign or when unauthorized transfers are detected
Solution Approach 2:
The patent makes the data transfer authorization dynamic by linking it to the current validity of the employee's credentials and organizational relationship. The unique document number's effectiveness can be revoked or invalidated by the issuing organization at any time, allowing dynamic control over data retention and access rights based on current employment status rather than static historical authorization
4Reliability
If high-level security measures are implemented using leading-edge technologies, then security reliability is improved, but costs become extremely expensive and operations become complicated
Solution Approach 1:
The patent creates a universal security system where a single unique document number performs multiple functions: it serves as an authentication credential, a verification key, a transfer authorization, and a tracking identifier. This multi-functional approach eliminates the need for separate complex security systems for each function, reducing both cost and operational complexity while maintaining high security through cryptographic verification
Data Source
AI summary
An electronic data transmission/reception control method and an electronic data transmission/reception control system are provided, which can improve reliability and confidentiality of electronic data to be transmitted and received.In the electronic data transmission/reception control method, a terminal in which an employee app is installed executes: a document number assignment step; an encryption step; a transmission request step; and a browsing step. A computer in which an organization app O is installed executes an identity verification step and a transmission approval step when an employee who belongs to an own organization is a source of the electronic data, or executes an identity verification reply step and a reception approval step when the employee who belongs to the own organization is a destination of the electronic data. A computer in which a service app is installed executes a communication destination specifying step and a relay step.