Data Usage Control via Cryptographic Information Sharing Agreements
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems lack an automated way to control data usage after transmission over the internet, fail to verify data provenance, and do not reconcile PSD2 and GDPR regulations, leading to insecure and uncontrolled data exchanges.
Innovation Solution
A method and system for establishing cryptographically signed agreements on data-use permissions using JSON-LD, enabling users to control data access and usage through Information Sharing Agreements (ISAs) across decentralized networks, ensuring transparency and compliance with regulations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is transmitted freely across the Internet without automated control, then data portability and accessibility are improved, but data security and usage control deteriorate
Solution Approach 1:
The system establishes usage policies and cryptographic permissions before data transmission occurs. Data providers define what data can be accessed, by whom, and under what conditions prior to any data exchange. This preliminary configuration of access controls ensures that data portability is enabled while security constraints are pre-established and automatically enforced during transmission and subsequent usage.
Solution Approach 2:
The patent introduces an intermediary verification system that acts as a mediator between data providers and data recipients. This intermediary layer validates usage policies, verifies cryptographic signatures, and ensures compliance with established permissions without preventing data transmission. The intermediary enables secure data exchange by mediating the verification process rather than blocking data flow.
2Reliability
If automated data usage control systems are implemented, then data security and compliance are improved, but system complexity increases
Solution Approach 1:
The system employs universal cryptographic mechanisms and standardized policy frameworks that can be applied across diverse data types, platforms, and use cases. Rather than implementing separate control systems for different scenarios, the patent uses a unified approach based on cryptographic permissions and reusable policy templates, reducing overall system complexity while maintaining comprehensive data usage control.
Solution Approach 2:
The automated control system is designed to self-verify and self-enforce through cryptographic proofs and automated policy validation. Usage permissions are encoded in a way that enables receiving systems to automatically verify compliance without requiring complex external verification processes. The system serves itself by using cryptographic signatures to prove authorization, eliminating the need for manual approval workflows.
3Measurement precision
If cryptographic verification of data provenance is implemented, then data authenticity and accountability are improved, but processing time and computational overhead increase
Solution Approach 1:
Cryptographic signatures and provenance metadata are attached to data at the source before transmission occurs. Data providers sign data with their private keys and embed usage policy information in advance, so that verification at the receiving end involves checking pre-computed cryptographic proofs rather than performing complex verification calculations. This preliminary cryptographic preparation reduces processing time at receiving systems.
Solution Approach 2:
The system uses cryptographic hashes and digital signatures that can be efficiently copied and verified. Rather than transmitting or re-computing large amounts of verification data, the patent employs compact cryptographic proofs (signatures and hashes) that can be rapidly copied and validated. These cryptographic copies serve as efficient verification tokens that prove data provenance without requiring re-computation of the entire verification chain.
4Reliability
If user permissions are restricted for data protection, then data security is improved, but data accessibility and utility deteriorate
Solution Approach 1:
The system implements fine-grained permission controls that apply different access rules to different portions or aspects of data. Rather than applying uniform restrictions across entire datasets, the patent enables providers to specify precise usage conditions for specific data elements, allowing maximum accessibility within security constraints. Each data element can have its own localized permission set, optimizing both protection and utility.
Solution Approach 2:
Usage permissions are designed to be dynamic rather than static, allowing access conditions to change based on context, user identity, or specific use cases. The cryptographic permission system enables flexible authorization where data can be accessed by different parties under different conditions without requiring new permission configurations. This dynamic approach maintains security while maximizing data accessibility for legitimate uses.
Data Source
AI summary
A method for seamlessly and automatically granting tailored permission for use and transference of internet data between databases with comprehensive consent is described. The method employs a graph language such as JSON-LD to integrate and employ cryptographically signed Information Sharing Agreements (ISA) between parties. Data is serialized to be easily transferred between databases when appropriate permission is obtained. Granular data exchange under usage control contacts can be automated among any number of parties on the internet. As such, the method provides a means by which users may control not only what may be done with their data, but to what entity or entities the data may be transferred. Advertisements may then be served to the user according to his or her preferences as defined within a web or desktop app, which is then applied to all related ad publishers publishing to the domains visited by the user.