Identity-Linked Security Tokens for Multi-User Digital Assets
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Obtaining or generating authenticating information for multiple devices or users to access digital resources is an inherently insecure process, particularly when authorizing multiple devices or users to access sets of digital resources.
Innovation Solution
Generating datasets based on identity elements of multiple users, creating linkage definitions that identify shared digital assets, and generating activation elements to trigger security tokens for access based on biometric data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authenticating information is used to authorize multiple devices or users to access digital resources, then access control is established, but the process is inherently insecure and challenging
Solution Approach 1:
The patent introduces a computing system as an intermediary that receives datasets from multiple users, generates digital identity profiles with identity elements, and creates linkage definitions to authorize access. This intermediary approach replaces direct peer-to-peer authentication with a centralized system that manages security tokens and access control, improving security while simplifying the authorization process for multiple devices and users
Solution Approach 2:
The patent creates digital copies of user identity information in the form of datasets and digital identity profiles. Instead of requiring original authenticating information to be shared between devices, the system generates replicated identity elements (such as biometric data, device identifiers, and security tokens) that can be distributed securely. This copying mechanism enables multiple devices to access resources without compromising the original authentication credentials
2Reliability
If datasets and identity profiles are generated for multiple users to enable secure access, then security is improved, but the system complexity increases
Solution Approach 1:
The patent segments user information into discrete datasets containing specific identity elements (biometric data, device identifiers, location information, etc.). Each user has a separate digital identity profile that can be independently generated, stored, and managed. This segmentation allows the system to handle multiple users securely without creating a single complex monolithic structure, as each profile can be processed independently through standardized procedures
3Measurement precision
If linkage definitions and activation elements are created to control access to shared digital assets, then access control precision is improved, but the process complexity increases
Solution Approach 1:
The patent creates linkage definitions and activation elements in advance before actual access is needed. The computing system pre-establishes the relationships between users, devices, and digital assets, and pre-configures activation conditions (such as time-based triggers, location-based conditions, or biometric verification requirements). This preliminary setup allows for precise access control without adding complexity during the actual authorization moment, as the control logic is already in place and ready to execute
Data Source
AI summary
A method includes: generating a dataset based on a first digital identity profile of a first entity and a second digital identity profile of a second entity; inputting the dataset to an artificial intelligence (AI) agent to generate a linkage definition and a set of activation elements; determining that at least one activation element of the set of activation elements has been triggered; in response to determining that the at least one activation element has been triggered, generating one or more security access tokens based on the linkage definition, the one or more security access tokens indicating that access to the one or more assets is granted; and transmitting the one or more security access tokens to at least one of a first device identified in the first digital identity profile or a second device identified in the second digital identity profile.