Low-Value Token Mediator for Secure Data Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure network transaction systems face challenges in allowing merchants to share data with third-party services without compromising data security, especially when sensitive data is required for fraud protection and analytics.
Innovation Solution
The system utilizes low-value tokens to enable secure sharing of sensitive data by generating a low-value token from a high-value token, which can be used to obtain specific sensitive data subsets from the transaction processor, thereby maintaining security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If merchants store sensitive data locally for third-party fraud protection services, then fraud protection capability is improved, but data security is worsened
Solution Approach 1:
The patent introduces a transaction processor as an intermediary between merchants and third-party fraud protection services. The processor holds the sensitive data and provides it to authorized third parties when needed, while merchants only possess high-value tokens. This mediator role allows fraud protection services to access sensitive data when required without merchants storing it locally, thus improving fraud protection capability while maintaining data security.
Solution Approach 2:
The patent segments the system into three distinct components: merchants who hold high-value tokens, a transaction processor that securely stores sensitive data, and third-party services that can access sensitive data through authorized requests. This segmentation allows each entity to have only the data or capabilities they need, enabling fraud protection services to function without merchants storing sensitive data locally.
2Adaptability or versatility
If merchants share sensitive data with other merchants for analytics, then data sharing capability is improved, but data security is worsened
Solution Approach 1:
The transaction processor serves as an intermediary that controls data sharing between merchants. Instead of merchants directly sharing sensitive data, they submit requests to the processor which then provides the necessary data subsets to authorized parties. This mediator role enables data sharing for analytics while maintaining security through centralized control and audit trails.
Solution Approach 2:
The patent implements local quality by providing different merchants with different levels of data access based on their specific needs. The processor can grant access to specific data subsets relevant to each merchant's analytics requirements without providing full sensitive data sets, thus enabling targeted data sharing while minimizing security risks.
3Reliability
If merchants use high-value tokens for transactions, then transaction security is improved, but the ability to access specific data subsets is worsened
Solution Approach 1:
The transaction processor acts as an intermediary that bridges the gap between high-value token security and data access needs. When a merchant needs to access specific data subsets, they submit a request to the processor along with their high-value token. The processor verifies the token's authenticity and then provides the appropriate data subset, thus maintaining transaction security while enabling data access when necessary.
Solution Approach 2:
The system dynamically adjusts data access based on the merchant's needs and authorization level. The high-value token serves as a dynamic credential that can be used for transactions and, when appropriate, for requesting specific data subsets from the processor. This dynamic approach allows the system to maintain security while adapting to different data access requirements.
Data Source
AI summary
Embodiments include methods and systems for linking high-value tokens using a low-value token, comprising receiving, from an electronic data server, a first high-value token and a request for a low-value token, the first high-value token being associated with sensitive data associated with a user, and the low-value token being associated with a subset of the sensitive data associated with the user. The methods and systems further comprise providing the low-value token to the electronic data server, and receiving, from a second electronic data server, the low-value token and a request for a second high-value token, the low-value token having been provided to the second electronic data server by the electronic data server. The methods and systems further comprise generating a second high-value token associated with the sensitive data associated with the user, and providing the second high-value token to the second electronic data server.