Mobile Electronic Records Access With Encrypted Stateless Sessions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current electronic records systems lack secure authentication mechanisms and user-friendly methods for controlling data access, leading to potential data breaches and unauthorized sharing of confidential information.
Innovation Solution
A system and method utilizing a server arrangement with user identification, profile management, and data access control, combined with a mobile application for secure user authentication and encrypted, stateless communication sessions, to manage and share confidential data securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password-based authentication mechanisms are used, then ease of operation is improved, but security reliability deteriorates
Solution Approach 1:
The authentication system is segmented into multiple independent factors (something the user knows, has, or is) rather than relying on a single password. This multi-factor authentication approach divides the security mechanism into separate verification layers, where each factor provides independent security validation, thereby maintaining ease of operation while significantly improving authentication security reliability.
2Ease of operation
If user data is stored in a centralized data repository, then ease of access is improved, but security risk increases
Solution Approach 1:
User data is segmented into multiple encrypted blocks distributed across different storage locations rather than stored centrally in one repository. Each block contains only a portion of the user's information, and all blocks must be assembled to reconstruct the complete data set. This segmentation maintains ease of access through centralized management while dramatically reducing security risk, as compromising one block does not expose the entire data set.
Solution Approach 2:
An intermediary decryption mechanism is introduced between the stored data blocks and the user. The system uses cryptographic protocols where data remains encrypted during storage and transmission, and only decrypts in the presence of authorized users through multi-party computation. This intermediary layer protects data from breaches during storage while maintaining ease of access for authorized users.
3Adaptability or versatility
If third-party data sharing is enabled, then adaptability is improved, but control precision deteriorates
Solution Approach 1:
Data sharing permissions are segmented at the granular level of individual data blocks rather than applying blanket access controls to entire data sets. Users can selectively assign different third parties access to specific blocks of their data, enabling highly adaptable sharing arrangements while maintaining precise control over what each third party can access. This block-level permission system resolves the contradiction by making both adaptability and control precision achievable simultaneously.
Data Source
AI summary
A system for secure communication of personal information, including a server arrangement in communication with one or more databases storing personal information associated with multiple users. The system includes a machine-readable storage encoded with non-transitory program code executable by one or more processors of a mobile communication device of a user to implement on the mobile communication device a user application to manage retrieval of personal information stored in the one or more databases. The user application including a user interface manager to manage a Graphical User Interface (GUI) to manage display of information to the user and manage user inputs through the GUI, and a data exchange control manager to manage exchange of data between the mobile device and the server arrangement. The mobile communication device is configured to communicate with the server arrangement by establishing and monitoring a stateless communication session including an encrypted communication channel.