Distributed Ledger Token Trading for Private Information Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for managing private information are vulnerable to leakage and unauthorized access due to centralized data storage, which can lead to hacking and information leaks, despite the use of encryption and authentication technologies.
Innovation Solution
A method for trading private information access rights using a distributed ledger system, where a distributed network of servers authenticates and manages tokens that represent access rights, allowing services to be provided without direct transmission of private data, and includes features like token expiration and validation to prevent misuse.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If private information is stored in centralized databases for service provision, then service accessibility is improved, but security against hacking and information leakage deteriorates
Solution Approach 1:
The patent segments private information into multiple distributed nodes across a decentralized network, eliminating centralized storage. Each node holds a portion of the data or access rights, making the system both accessible (services can be provided through any node) and secure (hacking one node does not compromise the entire system).
Solution Approach 2:
The patent introduces tokens as intermediaries that represent access rights to private information. These tokens enable service provision without direct exposure of the underlying private data, acting as a mediator between service providers and data owners while maintaining both accessibility and security.
2Reliability
If encryption technologies are used to protect private information, then security is improved, but vulnerability to key extraction attacks and data mining deteriorates
Solution Approach 1:
The patent extracts the essential function of private information (access rights) and separates it from the actual sensitive data. Tokens contain only the necessary access permissions without including the private information itself, eliminating the target for key extraction attacks while maintaining security through distributed verification.
Solution Approach 2:
The patent creates multiple identical copies of access rights across distributed nodes through token distribution. Instead of relying on a single encrypted copy that is vulnerable to attacks, the system uses numerous replicated tokens that collectively provide the same access functionality without centralizing the actual private information.
3Adaptability or versatility
If private information is transmitted directly for service provision, then service functionality is improved, but risk of information leakage and unauthorized copying deteriorates
Solution Approach 1:
The patent uses tokens as intermediaries that enable service functionality without transmitting actual private information. The tokens carry the necessary access rights and permissions, allowing services to function as intended while preventing information leakage since the sensitive data never leaves the data owner's control.
4Reliability
If decentralized approaches are used to prevent hacking, then security is improved, but system complexity increases
Solution Approach 1:
The patent creates a universal token system that can be applied across multiple services and data types without requiring separate decentralized implementations for each. The token mechanism provides a standardized, multi-functional approach to secure access control that reduces overall system complexity while maintaining security benefits.
Data Source
AI summary
Disclosed is a method for trading private information access rights based on a distributed ledger, performed by a distributed network system including a plurality of distributed servers to perform authentication and store a token, the method including giving rights to use the token to a buyer terminal by performing authentication upon receiving a token trade request, permitting a service application server to use the token by performing authentication upon receiving a token usage request, providing, by the service application server, a predefined service by using the token and broadcasting usage detail of the token to the distributed network system, and updating, by the distributed server, the usage detail of the token.


