Masked Credential Data Access via Segmented Server

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data security protocols face challenges in enabling users with user-level access to an application server to retrieve and store data using authenticated connections based on masked credential data, as they may inadvertently expose sensitive information.

Innovation Solution

Implementing a system where credential data is stored on a separate credential data management server and retrieved within a data retrieval or storage script executed by a root process, with the credential data stored as a local variable to prevent direct access by users with user-level access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If credential data is stored on the application server for user-level access, then data retrieval and storage operations can be performed, but credential data may be exposed to users compromising security

Engineering Contradiction:

Improvedata retrieval and storage capabilityVSAvoidcredential data exposure

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system separates credential data storage from the application server by implementing a dedicated credential data management server. This segmentation ensures that credential data is stored independently and accessed only through controlled mechanisms, preventing user-level exposure while maintaining operational capability.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A credential data management server acts as an intermediary between the application server and credential data. This intermediary component controls access to credential data through scripted operations, allowing data retrieval and storage operations to proceed while blocking direct user access to sensitive information.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If credential data is masked to prevent user access, then security is improved, but users cannot directly use credential data for authenticated connections

Engineering Contradiction:

Improvecredential data protectionVSAvoidauthenticated connection capability

Core Design Contradiction:

Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The system performs preliminary actions by pre-configuring credential data in a masked state on the credential data management server. Data retrieval and storage scripts are prepared in advance with the capability to access and use this masked credential data, enabling authenticated connections without requiring users to directly handle or understand the credential data.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The credential data management server serves as an intermediary that bridges the gap between masked credential data and authenticated connection requirements. It provides controlled access mechanisms that allow scripts to retrieve and use credential data for authentication while maintaining the masked state and preventing direct user access.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Adaptability or versatility

If users with user-level access are granted permissions to retrieve and store data, then operational flexibility is improved, but unauthorized access to credential data becomes more likely

Engineering Contradiction:

Improveuser-level access flexibilityVSAvoidcredential data security

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The system segments access permissions by separating user-level access rights from credential data access. Users can perform data retrieval and storage operations with appropriate permissions, but the credential data itself remains segmented into a protected space on the credential data management server that requires scripted access through the root process.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The credential data management server acts as an intermediary that mediates between user-level access requests and credential data. It verifies and controls access through scripted operations executed by the root process, allowing operational flexibility for users while maintaining reliable security controls over credential data.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS20240403464A1Authenticated data access using masked credential data

Publication Date: 2024.12.05 STATE FARM MUTAL AUTOMOBILE INSURANCE COMPANY

AI summary

Techniques for authenticated data retrieval and/or storage using masked credential data are described. In accordance with some of the techniques described herein, a method includes receiving a data retrieval request associated with accessing target data stored on a cloud storage platform; providing a credential data request associated with the data retrieval request and the cloud storage platform to a credential data management server; based on the credential data request, receiving credential data from the credential data management server; determining a field of a data retrieval script based on the credential data; and executing the data retrieval script based on the field, wherein executing the data retrieval script includes establishing an authenticated connection with the cloud storage platform and accessing the target data using the authenticated connection.