Hashed Directory Matching for Private User Connections
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems that facilitate user connections by accessing and storing contact information are vulnerable to data breaches and misuse, posing security risks and privacy concerns.
Innovation Solution
A secure directory service that encrypts and encapsulates user communications within a digital security bubble (DSB), ensuring only intended recipients can decrypt messages, while maintaining user privacy by not storing clear-text contact information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the service accesses and stores user contact information to enable user connections, then user connection functionality is improved, but security and privacy protection deteriorate
Solution Approach 1:
The patent extracts the contact information from the service provider's storage system and keeps it exclusively on user devices. The service can still facilitate connections by comparing hashed versions of contact information, but the actual contact data never leaves user control, thus maintaining security while enabling functionality.
Solution Approach 2:
The patent introduces hashed versions of contact information as an intermediary mechanism. The service provider stores and compares hashed contact data to enable match-making, but the hashing function ensures that the original contact information cannot be recovered, acting as a security mediator that enables functionality without compromising privacy.
2Productivity
If the service stores contact information in clear text for easy matching, then connection matching efficiency is improved, but vulnerability to data breaches and misuse increases
Solution Approach 1:
The patent transforms contact information from clear text to hashed format, changing the parameter of data representation. This transformation maintains the ability to perform matching operations (by comparing hashed values) while fundamentally altering the data form to prevent unauthorized access and misuse.
Solution Approach 2:
The patent converts the potential harm of storing contact information (security risk) into a benefit by using hashing. The hashed form cannot be reversed to obtain original contact data, yet retains all necessary properties for efficient matching, thus converting a security vulnerability into a security feature.
3Ease of operation
If the service harvests contact information from users, then the ability to locate friends is improved, but user consent and control over information usage deteriorate
Solution Approach 1:
The patent implements a self-service model where users actively upload their own contact information to the service. This gives users direct control over what information is shared and with whom, eliminating the need for the service to harvest information passively and ensuring informed consent.
Solution Approach 2:
The patent requires users to perform the action of uploading contact information beforehand, before any matching or connection features are activated. This preliminary action ensures users are aware of and consent to the information being stored, giving them control over the process from the outset.
Data Source
AI summary
Secure directory services are disclosed. A cryptographic hash of a foreign identifier associated with a potential user is received. A determination is made that the received cryptographic hash of the foreign identifier matches a representation of a stored entry. In response to the determination, a transmission of a representation of a native identifier associated with the stored entry is transmitted to the sender of the cryptographic hash of the foreign identifier.