Item-Restricted Token Activation for Shared-Device Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional systems fail to effectively restrict access to resources or services on shared devices, leading to security concerns and poor user experience, as users may inadvertently gain access to sensitive information or malicious content.
Innovation Solution
Implementing restricted access tokens that bind to specific items or entities, validated through URL data and user activity, ensuring access is limited to authorized items and entities, thereby enhancing security and user experience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional access tokens are used on shared devices, then users can access resources and services, but security is compromised as other users can access sensitive information
Solution Approach 1:
The patent segments the access token functionality by creating separate item-restricted tokens for different resources or services. Each token is bound to specific items rather than providing broad access, allowing the system to maintain security while enabling shared device usage. The token is divided into multiple restricted versions, each with limited scope.
Solution Approach 2:
The patent applies local quality by making each token instance have different access permissions based on its binding to specific items. Rather than uniform access rights, each token is customized with local quality characteristics that grant access only to authorized resources, enabling fine-grained control on shared devices.
2Reliability
If passwords are used to restrict access to resources, then security is improved, but passwords can be learned or stolen by other users
Solution Approach 1:
The patent introduces an intermediary mechanism between the user and the resource access. Instead of directly using passwords, the system uses item-restricted tokens that are bound to specific items. This intermediary token system prevents direct exposure of sensitive authentication credentials while maintaining security control.
Solution Approach 2:
The patent creates token copies that are bound to specific items rather than using the master password directly. Each item-restricted token is a restricted copy of the full access rights, allowing secure sharing without exposing the underlying password or full access credentials.
3Ease of operation
If full access tokens are issued to shared devices, then ease of access is improved, but access to unauthorized resources increases
Solution Approach 1:
The patent segments the broad access token into multiple narrow-scope tokens, each restricted to specific items. This segmentation maintains ease of access for authorized resources while preventing unauthorized access to resources outside the token's binding scope.
Solution Approach 2:
The patent implements dynamic access control where tokens are created and bound to specific items based on user actions. The system dynamically generates item-restricted tokens as needed, allowing flexible access management that adapts to specific usage scenarios while maintaining security boundaries.
Data Source
AI summary
In some embodiments, an item-restricted access token may be bound to one or more items. In some embodiments, a first item that is accessible via a first website accessed by a user may be detected. Based on the detection and an authentication of a user, an item-restricted access token may be activated for accessing an item that corresponds to the first item. After the activation of the item-restricted token, a request may be obtained for an action related to a candidate item. The action related to the candidate item may be validated based on the item-restricted access token, where the validation indicates that the action related to the candidate item is valid based on a determination that the candidate item corresponds to the first item.