Decentralized Data Storage and Blockchain for Secure Sharing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Data owners face challenges in controlling and securely sharing their personal data, as it may be inaccessible due to technical failures or malicious cyberattacks, and is often locked within a specific vendor's system, limiting portability and security.

Innovation Solution

A computer-implemented method using decentralized data storage and blockchain technology to securely store and manage data, where data owners can encrypt and control access through a user interface, allowing authorized users to access data only with consent, recorded on a distributed ledger for transparency and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If data is stored and managed by a single entity, then data management is simplified, but data security and availability are compromised

Engineering Contradiction:
Improvedata management complexityVSAvoiddata security and availability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent segments data management by distributing data across multiple independent storage nodes instead of centralizing it in a single entity. Each node stores encrypted data independently, eliminating the single point of failure while maintaining manageable complexity through automated cryptographic operations and standardized access protocols.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces cryptographic keys and smart contracts as intermediaries between data owners and storage nodes. These intermediaries enable secure data sharing without requiring direct trust relationships, allowing simplified management interfaces while ensuring robust security through decentralized cryptographic verification.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If data is encrypted and stored in decentralized storage, then data security is improved, but data accessibility and portability are reduced

Engineering Contradiction:
Improvedata securityVSAvoiddata accessibility and portability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent performs preliminary encryption of data before storage and pre-establishes smart contracts that define access rights and conditions. This preliminary action ensures security is built-in from the start while maintaining accessibility, as authorized users can retrieve data without complex real-time authorization negotiations.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent replaces manual data access control mechanisms with automated cryptographic verification and smart contract execution. This substitution maintains strong security while improving ease of operation, as the system automatically verifies permissions and facilitates data portability without requiring complex manual coordination between parties.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Productivity

If data is shared through a vendor service, then data collection is efficient, but data ownership control is lost

Engineering Contradiction:
Improvedata collection efficiencyVSAvoiddata ownership control
Core Design Contradiction:
ProductivityVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamic data ownership control where the data owner can modify access permissions, revoke consent, and control data usage at any time through smart contracts. This dynamic control maintains efficient data collection through automated processes while preserving adaptability, as ownership rights can be flexibly adjusted based on changing requirements without requiring vendor intervention.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentEP3637673B1Secure data sharing
Publication Date: 2022.02.02 SAP SE
  • EP3637673B1 patent drawingFigure 1
  • EP3637673B1 patent drawingFigure 2
  • EP3637673B1 patent drawingFigure 3

AI summary

A computer-implemented method is provided for secure data sharing. The method comprises: storing, by a data owner or an entity authorized by the data owner, via a data management user interface (12), in a decentralized data storage (30), data in an encrypted format; storing, via the data management user interface (12), in a blockchain (40), information indicating the data owner and a reference to the data stored in the decentralized data storage (30); and storing, by the data owner, via the data management user interface (12), in the blockchain (40), information indicating consent given to one or more authorized users for using the data