Key-Based Content Management for Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face difficulties in controlling access to shared content across various electronic devices, as once content is downloaded, it is often impossible to revoke or manage access effectively.
Innovation Solution
A key-based content management and access system that allows users to selectively control access to content instances by encrypting them with a key, which is stored and managed by a content management subsystem, enabling users to define access rules based on user and device profiles, and manage access permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If content is downloaded to multiple devices for accessibility, then content accessibility is improved, but access control capability deteriorates
Solution Approach 1:
The content is encrypted with a key before distribution to multiple devices. This preliminary encryption action ensures that even though the content is widely accessible, the owner maintains control through the ability to manage and revoke keys, thus resolving the contradiction between accessibility and access control
Solution Approach 2:
A key management subsystem acts as an intermediary between the content owner and multiple access devices. This intermediary enables the owner to control access to downloaded content by managing key distribution and revocation, thereby maintaining access control capability while allowing broad content accessibility
2Reliability
If content is encrypted and access is controlled through key management, then content security is improved, but system complexity increases
Solution Approach 1:
The key management functionality is extracted as a separate, dedicated subsystem rather than being embedded in every device. This extraction centralizes the complexity of key management while keeping individual access devices simpler, thus improving content security without excessively increasing overall system complexity
Solution Approach 2:
The key management subsystem provides multiple functions including key generation, distribution, storage, and revocation through a single unified system. This multi-functionality consolidates what would otherwise require multiple separate mechanisms, reducing overall system complexity while maintaining strong content security
Data Source
AI summary
An exemplary method includes receiving data representative of a content instance over a network from an access device associated with a first user, encrypting the content instance in response to a command initiated by the user by way of one or more graphical user interfaces, providing a key configured to facilitate decryption of the encrypted content instance, creating at least one access rule corresponding to the encrypted content instance, transmitting data representative of the encrypted content instance to a requesting access device associated with a requesting user, receiving, from the requesting access device, data representative of a request to access the key over the network, and performing a predefined action related to the key in response to the request and in accordance with the at least one access rule.