Distributed Ledger Data Sharing Session Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data sharing systems face security risks due to the insecure sharing of account information and limitations in facilitating data sharing between multiple systems, as they often rely on username and password sharing or access delegation frameworks like OAuth, which are not scalable and lack standardized interfaces.
Innovation Solution
The use of a distributed ledger to create and verify sharing session data, allowing secure data sharing between systems without the need for username and password sharing, by utilizing tokens and smart contracts to authorize and execute data transfers securely across multiple systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If username and password sharing is used for data sharing authorization, then data sharing between systems is enabled, but security is compromised as malicious parties can masquerade as users
Solution Approach 1:
The patent introduces a third-party authorization server as an intermediary between data providers and consumers. This server issues temporary authorization tokens that enable data sharing without requiring username and password transmission. The intermediary handles authentication centrally, allowing systems to share data securely through token-based authorization rather than direct credential sharing.
Solution Approach 2:
The patent replaces sensitive account information (usernames and passwords) with authorization tokens that copy the essential authorization function without exposing the underlying credentials. These tokens are temporary, scoped, and can be revoked, providing a secure alternative that maintains authorization capability while eliminating the security risks of credential transmission.
2Ease of operation
If access delegation frameworks like OAuth are used, then data sharing between two systems is enabled, but scalability is limited as they fail to facilitate sharing between more than two systems
Solution Approach 1:
The patent designs an authorization framework where the authorization server can issue tokens valid for multiple different data providers and consumers. The token structure includes claims that describe authorized resources, allowing a single token to enable data sharing across more than two systems. This universal approach allows the same authorization mechanism to scale from two-party to many-party scenarios without requiring system-specific customization.
3Ease of operation
If traditional authorization frameworks are used, then data sharing is enabled, but a standardized interface for sharing between systems is not provided, limiting interoperability
Solution Approach 1:
The patent standardizes the authorization interface by defining a uniform token structure with specific claims (subject, object, scope, expiration). This standardized parameter set can be interpreted consistently across different systems and protocols, enabling interoperability. The framework allows the same authorization token to work between various system types (web services, mobile apps, APIs) as long as they recognize the standardized claim format.
Data Source
AI summary
Systems as described herein may include authorizing the sharing of data and sharing data between a variety of systems. A request to share data may be provided to a first system. The system may create sharing session data on a distributed ledger accessible by a number of systems. Sharing session data may be stored using a transaction stored on a distributed ledger. A second system may obtain the sharing session account and verify the sharing session. On verification of the sharing session, a variety of data may be shared between the systems identified in the sharing session data. The sharing session data may be established between two or more systems. The distributed ledger may be maintained by the systems themselves and/or a distributed network system. In a variety of embodiments, encrypted data may be stored and/or obtained using the distributed ledger.