Digital Asset Access Control via Multi-Phase Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The challenge lies in controlling the dissemination and access to digital content online, where existing methods struggle to effectively manage and restrict access due to the nature of digital availability, leading to difficulties in ensuring secure and authorized distribution.

Innovation Solution

A multi-factor authentication method is implemented, involving user registration, verification, and asset acquisition processes, using a digital asset associated with primary and secondary key sequences, and a network interface with embedded asset access applications, to securely distribute and control access to digital assets.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If digital content is made available online for dissemination, then accessibility and distribution speed are improved, but control over access and prevention of unauthorized copying deteriorate

Engineering Contradiction:
Improvedistribution speedVSAvoidaccess control
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent segments the authentication process into multiple distinct phases: user registration, device registration, and content access verification. Each phase has specific authentication requirements that must be satisfied independently. The system also segments access control into different permission levels (read, write, execute, delete) that can be independently granted or revoked, allowing fine-grained control over digital content while maintaining fast online distribution.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements preliminary authentication actions before content distribution. Users must complete registration and device binding processes in advance, creating authenticated sessions and receiving digital signatures beforehand. Content is signed with digital certificates prior to distribution, enabling verification during access without slowing down the actual content delivery process.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If multi-factor authentication is implemented for secure access control, then security and access control are improved, but system complexity and user operation difficulty worsen

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent creates a universal authentication framework that handles multiple authentication types (user credentials, device identifiers, digital signatures) through a single integrated system. The server performs all verification functions centrally, and the client application provides a unified interface for users to interact with different authentication mechanisms without needing to understand the underlying complexity of each factor.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent introduces digital signatures and certificates as intermediaries between the user/device and the content. Instead of directly implementing complex multi-factor verification logic in every access point, the system uses cryptographic intermediaries that automatically verify authentication status, simplifying the overall system architecture while maintaining high security standards.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Measurement precision

If device registration and verification processes are required, then access control precision is improved, but ease of operation deteriorates

Engineering Contradiction:
Improveaccess control precisionVSAvoiduser operation ease
Core Design Contradiction:
Measurement precisionVSEase of operation

Solution Approach 1:

The patent implements self-service device registration where the system automatically detects and registers device identifiers (such as hardware IDs, device tokens) without requiring manual user input. The authentication application automatically manages device binding, session creation, and credential storage, reducing operational burden on users while maintaining precise device-level access control.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11281749B2Method of selective online dissemination of digital assets
Publication Date: 2022.03.22 LEIDSE CO INC
  • US11281749B2 patent drawing
  • US11281749B2 patent drawing

AI summary

A method of controlling access to a digital asset by a user includes creating the digital asset, which includes a program file and a content file. The digital asset is associated with a primary key sequence and with a key-sequence document. The digital asset is stored at a distribution server. A user registration process, a user verification process, and an asset acquisition process are performed. The user registration process includes registering a storage device with the distribution server. The storage device includes a unique device identifier. The user is associated with the device identifier, with a secondary key sequence, and with a network interface. The network interface includes a unique interface identifier and has embedded therein an asset access application the secondary key sequence and a key sequence rule are provided to the user.