Distributed Interaction Data Integrity with Asymmetric Key Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing database analytic tools are inefficient, costly, and require substantial configuration and training, leading to inefficient utilization of system resources and increased risk of data manipulation or tampering, especially in large data volumes.

Innovation Solution

Implementing a data access and analysis system that utilizes asymmetric key pairs for interaction data integrity protection, including obtaining user account data, sending interaction challenge data, and validating system interaction data using a public key to ensure data integrity and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If asymmetric key pairs are used for interaction data integrity protection, then data integrity and security are improved, but device complexity increases

Engineering Contradiction:
Improvedata integrityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a certificate authority (CA) as an intermediary that issues digital certificates validating the association between public keys and user account identifiers. This mediator simplifies the complexity of asymmetric key verification by centralizing trust validation, allowing the data access and analysis system to rely on CA-signed certificates rather than performing complex peer-to-peer key verification.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary validation of digital certificates against trusted root certificates before processing interaction data. By pre-establishing trust through certificate validation against stored root certificates, the system avoids complex runtime verification procedures and ensures data integrity through advance authentication of communicating parties.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If digital certificate validation is performed for each interaction, then security is improved, but processing time increases

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system stores trusted root certificates in advance and performs certificate validation against these pre-stored references during interaction processing. This preliminary preparation of validation criteria enables efficient runtime verification without requiring complex cryptographic operations or external validation services for each interaction.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system creates a copy of the validation process by storing root certificates locally rather than performing validation through multiple external communication steps. This local copying of trust anchors enables faster validation by eliminating network round-trips and reducing the complexity of validation operations.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS20250258962A1Interaction data integrity protection for a distributed system
Publication Date: 2025.08.14 THOUGHTSPOT INC
  • US20250258962A1 patent drawing
  • US20250258962A1 patent drawing
  • US20250258962A1 patent drawing

AI summary

Interaction data integrity protection in a data access and analysis system includes obtaining user account data including a user account identifier and a public key, receiving, from a user device, first system interaction data indicating a request to interact with the data access and analysis system, sending, to the user device, first interaction response data including interaction challenge data, wherein the interaction challenge data includes a system interaction identifier that uniquely identifies the request to interact with the data access and analysis system, receiving, from the user device, second system interaction data signed with a private key of the asymmetric key pair, wherein the second system interaction data includes the system interaction identifier, validating the second system interaction data using the public key, and recording validated system interaction data obtained by the validating, the validated system interaction data including the second system interaction data signed with the private key.