Device Access Manager Secure Credential Synchronization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for sharing application credentials across multiple devices lack security and efficiency, as they often require manual updates and store credentials in plain text, making them vulnerable to hacking and compromising other locally stored credentials.
Innovation Solution
A system utilizing a device access manager with public-private key pairs for secure data synchronization, where devices register with the manager, encrypt data with public keys, and decrypt with private keys, ensuring secure exchange and authentication, even if the manager is hacked.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If credentials are stored in plain text for easy access, then ease of operation is improved, but security is worsened making systems vulnerable to hacking
Solution Approach 1:
The patent transforms credentials from plain text form to encrypted form using public-private key pairs. The encryption parameter changes the state of credentials so they cannot be read in plain text, yet remain accessible through decryption with private keys. This resolves the contradiction by maintaining accessibility while eliminating the security vulnerability of plain text storage.
Solution Approach 2:
The patent introduces an intermediary encryption layer between the credential storage and access points. Instead of direct plain text access, all credential access must go through the decryption intermediary using private keys. This mediator ensures that even if storage is compromised, the credentials remain protected without sacrificing legitimate access capability.
2Device complexity
If manual updates are used for credential synchronization, then device complexity is reduced, but productivity is worsened due to time-consuming updates
Solution Approach 1:
The patent implements automatic credential synchronization where the system itself performs the update propagation across devices without requiring manual user intervention. When credentials are updated on one device, the system automatically distributes and applies them to other registered devices, eliminating the time-consuming manual update process while maintaining system simplicity.
Solution Approach 2:
The patent performs preliminary encryption and authentication setup during device registration, so that subsequent credential updates can be automatically synchronized without requiring complex real-time coordination. The preliminary configuration enables efficient automated propagation of credential changes across all devices in the system.
3Ease of operation
If single-layer encryption is used for data protection, then ease of operation is improved, but reliability is worsened reducing security against determined attacks
Solution Approach 1:
The patent implements nested encryption where credentials are first encrypted with a device-specific private key, then the resulting encrypted data is further encrypted with a public key infrastructure layer. This nested structure provides multiple layers of security protection, making it significantly more resistant to attacks while maintaining manageable operational complexity through automated key management.
Data Source
AI summary
An approach to exchanging data and identity between devices, securely, is provided. The approach includes data encryption, device management, a voting mechanism, message queuing, and encrypted data storing. Using the approach, a user can provide their identity to and share data with an external software or device in a secure manner. Also the user can decide where to store their encrypted data.