Immutable Ledger Consent Management for User Data Sharing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Users face challenges in managing and verifying the use of their personal data across multiple platforms, leading to inefficiencies, redundancy, and security concerns, with existing systems burdening individuals with complex permission management and lacking traceability and uniformity.

Innovation Solution

A consent management system utilizing an immutable ledger to store and verify user data sharing permissions, track utilization, and ensure compliance, allowing for easy revocation and auditing of consents.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If users manage permissions individually across multiple websites, then each data holder can access user data, but the complexity of permission management increases and security decreases

Engineering Contradiction:
Improvesecurity of user dataVSAvoidcomplexity of permission management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a consent management platform as an intermediary system that mediates between users and multiple data holders. This platform centralizes permission management, allowing users to grant, revoke, and track consents in one location while automatically communicating with various data holders. The intermediary resolves the contradiction by reducing the complexity burden on users while maintaining security through centralized control and audit capabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent combines multiple scattered permission management functions into a single unified consent management platform. Instead of users managing permissions separately with each website, the system merges all consent tracking, verification, and management operations into one centralized system. This consolidation reduces complexity while improving security through unified oversight and consistent enforcement of user preferences.

Inventive Principle:
Principle #5Merging (Combining)

2Productivity

If each data holder stores and tracks permissions independently, then data access can be granted, but redundancy increases and computing resources are wasted

Engineering Contradiction:
Improveefficiency of data accessVSAvoidutilization of computing resources
Core Design Contradiction:
ProductivityVSLoss of energy

Solution Approach 1:

The consent management platform performs multiple functions universally: it stores consents, verifies permissions, communicates with data holders, audits data usage, and manages user preferences all in one system. This multi-functional approach eliminates the need for each data holder to maintain separate permission storage and tracking infrastructure, reducing redundant computing resources while maintaining efficient data access through a single authoritative source.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Loss of information

If users grant permissions to multiple websites, then data sharing occurs, but traceability and auditing of data use are difficult

Engineering Contradiction:
Improvetraceability of data useVSAvoidsystem structure for tracking
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The patent implements comprehensive feedback mechanisms where the consent management platform continuously monitors and tracks data access requests, verifies them against stored consents, and records all data usage activities. This feedback loop provides complete traceability of data use while maintaining manageable system complexity through automated verification and centralized logging, eliminating the need for complex distributed tracking across multiple independent systems.

Inventive Principle:
Principle #23Feedback

4Adaptability or versatility

If consent management is decentralized across multiple systems, then each system operates independently, but uniformity and consistency of consent handling are lost

Engineering Contradiction:
Improveflexibility of individual systemsVSAvoiduniformity of consent management
Core Design Contradiction:
Adaptability or versatilityVSStability of the object's composition

Solution Approach 1:

The patent segments the consent management functionality into a dedicated centralized platform separate from individual data holder systems. This segmentation allows the consent management platform to enforce uniform consent handling policies across all data holders while preserving the operational independence and adaptability of each data holder's core functions. The segmented architecture resolves the contradiction by providing consistent consent management at the platform level while allowing flexibility at the data holder level.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS20250291951A1System, Method, and Computer Program Product for Consent Management
Publication Date: 2025.09.18 VISA INTERNATIONAL SERVICE ASSOCIATION
  • US20250291951A1 patent drawing
  • US20250291951A1 patent drawing
  • US20250291951A1 patent drawing

AI summary

A system, method, and computer program product are provided for consent management. A method may include receiving a first data request for user data associated with a user, the user data stored in a user data database; communicating a consent request to the requester system; receiving a consent response from the requester system; storing consent data associated with the consent response for the user data requested in the first data request in an immutable ledger; receiving a consent verification request from the user data database, the consent verification request based on a second data request for the user data from the requester system to the user data database; verifying the consent verification request based on the consent data; and communicating a consent verification response to the user data database, the consent verification response indicating consent from the user to share the user data with the requester system.