Data Usage Control System Using Cryptographic Agreements
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a lack of automated systems for controlling data usage and ensuring data security and compliance with regulations like GDPR and PSD2 during data exchange across multiple networks and the Internet, with existing technologies failing to provide transparent and secure data portability and usage control.
Innovation Solution
A system and method using cryptographically signed Information Sharing Agreements (ISAs) facilitated by JSON-LD, enabling users to control data usage and ownership, with automated agreement negotiation and enforcement, ensuring transparent and secure data exchange across decentralized networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is shared across multiple networks and the Internet, then data portability and accessibility are improved, but data security and control are worsened
Solution Approach 1:
The patent introduces an intermediary system that mediates data exchanges between multiple networks. This intermediary verifies data provenance, enforces usage policies, and manages consent agreements, thereby enabling data portability across networks while maintaining security controls. The intermediary acts as a trusted third party that reconciles the needs for data accessibility with security requirements.
2Reliability
If automated data usage control systems are implemented, then data security and compliance are improved, but system complexity is worsened
Solution Approach 1:
The patent implements preliminary action by establishing usage policies, consent agreements, and provenance metadata before data exchanges occur. Data usage controls are predefined and encoded in agreements that are verified in advance, rather than requiring complex real-time control systems. This approach simplifies the operational complexity while maintaining compliance.
3Reliability
If cryptographically signed agreements are used for data exchange, then trust and accountability are improved, but processing overhead is worsened
Solution Approach 1:
The patent uses cryptographic hashes and digital signatures that create compact representations of agreement verification. Rather than processing entire agreement documents, the system verifies concise cryptographic proofs, significantly reducing processing overhead while maintaining trust and accountability. The cryptographic copies serve as efficient verification tokens.
4Loss of information
If data provenance tracking is implemented, then accountability and compliance are improved, but data exchange efficiency is worsened
Solution Approach 1:
The patent extracts provenance information into separate metadata structures and cryptographic proofs that are independent of the actual data payload. This separation allows data to be exchanged efficiently while provenance tracking operates in parallel through dedicated verification mechanisms, minimizing the impact on exchange speed.
Data Source
AI summary
A method for seamlessly and automatically granting tailored permission for use and transference of internet data between databases with comprehensive consent is described. The method employs a graph language such as JSON-LD to integrate and employ cryptographically signed Information Sharing Agreements (ISA) between parties. Data is serialized to be easily transferred between databases when appropriate permission is obtained. Granular data exchange under usage control contacts can be automated among any number of parties on the internet. As such, the method provides a means by which users may control not only what may be done with their data, but to what entity or entities the data may be transferred. Advertisements may then be served to the user according to his or her preferences as defined within a web or desktop app, which is then applied to all related ad publishers publishing to the domains visited by the user.