Encrypted Token Access via Segmented User Data Storage

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Users face inconvenience and security concerns when accessing multiple network services, as they need to input different IDs and passwords for each service, and managing personal information centrally can lead to data leakage and unauthorized access.

Innovation Solution

A system comprising a terminal device, client device, and server that manages user IDs and passwords by segmenting and distributing them across multiple data storage nodes, allowing the terminal device to combine and provide encrypted access tokens to the client device, reducing the need for direct input and enhancing security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If user data is centrally managed by a server, then ease of operation is improved, but security deteriorates due to data leakage risks

Engineering Contradiction:

Improveease of operationVSAvoidsecurity

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The user data is segmented into multiple pieces and stored in different data storage nodes (140) rather than centrally on the server. The terminal device (100) combines these segmented pieces when needed, so the server never holds complete user data, eliminating the security risk of central storage while maintaining operational convenience.

Inventive Principle:

Principle #1Segmentation

2Reliability

If users input ID and password for each service, then security is improved, but ease of operation deteriorates due to repeated input

Engineering Contradiction:

ImprovesecurityVSAvoidease of operation

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The terminal device (100) automatically manages authentication by retrieving segmented user data, combining it, and providing complete credentials to the client device (200) without requiring user intervention. This self-service automation maintains security through encrypted token transmission while eliminating the burden of repeated manual input.

Inventive Principle:

Principle #25Self-service

3Reliability

If complete user data is stored in multiple locations, then reliability is improved through redundancy, but security deteriorates due to increased attack surfaces

Engineering Contradiction:

ImprovereliabilityVSAvoidsecurity

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

User data is divided into multiple segments stored across different data storage nodes (140), creating redundancy for reliability while minimizing security risks. Since each node holds only partial data, compromising one node does not expose complete user information, reducing the attack surface compared to storing complete data in fewer locations.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS10097666B2Accessing a service using an encrypted token

Publication Date: 2018.10.09 SONY GROUP CORP

AI summary

An information processing method includes receiving a request for user data that is related to an external service, and retrieving the user data segments based on the request. The user data segments are then combined to generate the user data, which is then provided to the client device that requested the user data. After receiving the user data, the client device uses the user data to access the external service to which the data relates.