Delegated Consent Chain Validation for Secure API Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication networks face challenges in validating delegated consent across multiple intermediary nodes in API invocation chains, leading to failures in resource access due to lack of explicit consent from enterprises, particularly in scenarios involving multiple API aggregators.
Innovation Solution
A method and system for validating delegated consent by establishing a consent chain where each node in the chain registers its trust relationship and public key, allowing the validating node to verify digital signatures and one-time numbers to ensure valid consent is given at each step, ensuring secure and authorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If delegated consent mechanisms are implemented to streamline data access, then ease of operation improves, but security risks and unauthorized access increase
Solution Approach 1:
The patent introduces a validation service as an intermediary component that sits between the delegated consent mechanism and the data access system. This validation service receives access requests, validates them against the consent registry, and determines whether access should be granted. By inserting this intermediary layer, the system maintains the ease of operation provided by delegated consent while adding security through centralized validation of access permissions.
2Reliability
If comprehensive validation of delegated consent is performed, then security improves, but processing time and system complexity increase
Solution Approach 1:
The patent implements preliminary action by pre-registering consent information in a centralized registry before actual data access occurs. When a user grants delegated consent, the consent parameters, scope, and conditions are recorded in advance in the consent registry. This allows the validation service to perform quick lookups and validations during access requests without conducting comprehensive checks each time, thereby maintaining security while reducing processing time.
3Measurement precision
If multiple validation checks are implemented for delegated consent, then measurement precision of consent validation improves, but device complexity increases
Solution Approach 1:
The patent merges multiple validation checks into a single centralized validation service. Instead of implementing separate validation logic in multiple distributed components, all validation operations are consolidated in one service that queries the consent registry. This consolidation maintains high validation accuracy through comprehensive checks while reducing overall system complexity by eliminating redundant validation mechanisms across different system components.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
The present disclosure relates to a method of validating delegated consent and a node (12) performing the method. In an aspect, a method of validating delegated consent in a chain of nodes (10-14) is provided comprising a first node (10), a plurality of intermediate nodes (11, 13, 14) and a validating node (12), the first node (10) being configured to delegate consent to perform an action on behalf of the first node (10) to a last node (14) of the plurality of intermediate nodes, which delegated consent is validated by the validating node (12) in the chain following the last intermediate node (14) for the delegation of consent to the last intermediate node (14) to be allowed. The method comprises receiving (S305), at the validating node (12) from the last intermediate node (14), a digitally signed message of each preceding node (10, 11, 13) sent to an immediately following node (11, 13, 14) in the chain, and validating (S306), at the validating node (12), each provided digital signature by utilizing a preregistered (S301) public key of each node (10, 11, 13, 14) and that the indication of each node (10, 11, 13, 14) that an immediately following node in the chain is given consent to perform said action has been preregistered (S301), wherein the delegation of consent along the chain to the last intermediate node (14) to perform said action is allowed.