Dynamic Private Key Validation for Secure Data Retrieval

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing data access systems rely on static data values, which can be compromised, leading to unauthorized access and difficulty in detecting or preventing such breaches, especially in distributed systems like blockchain, where static data values are not validated for their underlying key validity.

Innovation Solution

Implementing a dynamic validation system using a combination of a seed value and timestamp to generate a second check value, ensuring that access to data files is only granted when both the first and second check values match, making unauthorized copies and future access prohibitive.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If static data values are used for authentication, then ease of operation is improved, but security is worsened due to vulnerability to compromise and unauthorized access

Engineering Contradiction:
Improveease of data accessVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent transforms the static authentication key into a dynamic verification process. Instead of using a fixed private key for authentication, the system generates a time-limited verification value by combining the private key with a timestamp through cryptographic hashing. This dynamic approach ensures that even if the private key is compromised, unauthorized access is limited to a specific time window, thereby improving security while maintaining ease of operation.

Inventive Principle:
Principle #15Dynamics

2Device complexity

If static data values are used in distributed systems, then device complexity is reduced, but detection of compromise becomes difficult

Engineering Contradiction:
Improvesystem simplicityVSAvoiddetection of key compromise
Core Design Contradiction:
Device complexityVSDifficulty of detecting and measuring

Solution Approach 1:

The patent implements preliminary action by incorporating timestamp validation into the authentication process. Before granting access, the system checks whether the verification value corresponds to a valid time window. This preliminary time-based validation enables the system to detect and prevent unauthorized access attempts that use compromised keys, as any access outside the authorized time window is automatically rejected, thereby improving compromise detection without significantly increasing system complexity.

Inventive Principle:
Principle #10Preliminary action

3Ease of manufacture

If static private keys are used for data access, then ease of manufacture is improved, but prevention of future unauthorized access is worsened

Engineering Contradiction:
Improveease of implementationVSAvoidprevention of unauthorized access
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent applies the dynamics principle by making the authentication verification time-dependent. The system generates a verification value that combines the private key with a timestamp, creating a dynamic credential that is only valid for a specific time window. This approach maintains ease of implementation while dramatically improving the prevention of unauthorized access, as compromised keys become useless after their time window expires, automatically preventing future unauthorized access without requiring complex key rotation mechanisms.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS11316706B2Method and system for using dynamic private keys to secure data file retrieval
Publication Date: 2022.04.26 MASTERCARD INT INC
  • US11316706B2 patent drawing
  • US11316706B2 patent drawing
  • US11316706B2 patent drawing

AI summary

A method for validating access to data files using a combination of secure data values includes: storing at least a first check value and a seed value in an account profile; receiving a data request message including at least a first data value, a second data value, a timestamp, and a data file request from a computing device; identifying a second check value using a predetermined algorithm applied to at least the seed value and the timestamp; validating the first data value using the first check value and the second data value using the second check value; and transmitting one or more data files indicated in the data file request to the computing device upon successful validation of the first data value and the second data value.