Secure Data Sharing via Intermediary Passphrase and Confidence Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing data sharing methods are inadequate for securely transferring medical or financial data from a data owner to a data recipient, especially when there is no mechanism for lossless communication or when the recipient does not wish to provide personal details, as seen in the context of health apps during the COVID-19 pandemic and in financial transactions.

Innovation Solution

A computer-implemented method using a sharing intermediary that provides access to data owner's data, personalized confidence information, and a passphrase to ensure secure transfer, allowing data owners to authorize transfers without needing to trust the intermediary, with optional data filtering, anonymization, and access limits.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a sharing intermediary is used to enable data transfer, then data security and trust are improved, but device complexity increases

Engineering Contradiction:
Improvedata securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a sharing intermediary as a third-party service that facilitates secure data transfer between data owners and recipients without requiring direct trust between the parties. The intermediary handles authentication, data transmission, and verification, thereby improving security while managing complexity through centralized service architecture.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If personalized data confidence information is stored and verified, then data accuracy and trustworthiness are improved, but loss of information increases

Engineering Contradiction:
Improvedata trustworthinessVSAvoidinformation loss
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent extracts and stores only the essential data confidence information (such as answers to confidence questions) separately from the main data payload. This allows verification of data authenticity without transmitting or storing the entire data set, thereby maintaining trustworthiness while minimizing information loss.

Inventive Principle:
Principle #2Taking out (Extraction)

3Object-affected harmful factors

If data filters and anonymization are applied, then data privacy and security are improved, but data completeness deteriorates

Engineering Contradiction:
Improvedata privacyVSAvoiddata completeness
Core Design Contradiction:
Object-affected harmful factorsVSLoss of information

Solution Approach 1:

The patent applies data filtering and anonymization selectively rather than universally. Different levels of filtering can be applied to different data fields based on their sensitivity, allowing privacy protection for identifiable information while preserving necessary data completeness for analysis and utility.

Inventive Principle:
Principle #3Local quality

4Reliability

If access limits and authentication requirements are imposed, then data security is improved, but ease of operation deteriorates

Engineering Contradiction:
Improvedata securityVSAvoiddata access convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent performs authentication and authorization checks in advance before data transfer occurs. By verifying credentials and establishing trust relationships beforehand, the system ensures security without requiring repeated complex authentication steps during actual data access, thereby improving ease of operation.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS20240193236A1Methods and systems of securely sharing data
Publication Date: 2024.06.13 SCI & ENG APPL LTD
  • US20240193236A1 patent drawing
  • US20240193236A1 patent drawing
  • US20240193236A1 patent drawing

AI summary

A computer implemented method for securely sharing underlying data of a data owner to a data recipient is disclosed. In an embodiment said method comprises the steps of providing access to underlying data to a sharing intermediary; providing personalised data confidence information to the sharing intermediary; storing said underlying data and said personalised data confidence information at the sharing intermediary, supplying a data passphrase generated by the sharing intermediary to the data owner that uniquely identifies said underlying data; supplying the data passphrase and the data confidence information to the data recipient; providing the data passphrase and the data confidence information to the sharing intermediary; checking whether the data passphrase is associated with stored underlying data; and supplying the underlying data from the sharing intermediary to the data recipient if the data confidence information matches the personalised data confidence information associated with the underlying data.