Multi-Device Authentication Key Segmentation for Secure Data Sharing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional data security methods using multi-authentication are vulnerable to exposure risks, allowing unauthorized disabling of data security without consent as users frequently transmit and share data through portable devices with smart functions.

Innovation Solution

An electronic device configures authentication information and locks/unlocks data using unique keys, transmitting locked data and keys between devices only upon approved events, ensuring secure data sharing and protection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional multi-authentication method is used for data security, then data protection is provided, but authentication information may be exposed and security disabled without consent

Engineering Contradiction:
Improvedata securityVSAvoidauthentication information exposure
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The authentication system is segmented into multiple independent electronic devices, each holding a separate key. Data is encrypted using multiple keys from different devices, so no single device possesses complete authentication information. This segmentation prevents authentication exposure because compromising one device does not reveal all authentication credentials needed to access the data.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A server acts as an intermediary that coordinates the multi-device authentication process. The server manages key distribution and verification without storing the actual authentication keys locally in each device. This intermediary structure enhances security by centralizing control while distributing sensitive information, preventing any single point of failure or exposure.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If data is frequently transmitted and shared through portable terminals, then communication convenience is improved, but security vulnerability increases

Engineering Contradiction:
Improvedata transmission convenienceVSAvoidsecurity risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

Authentication keys are pre-configured in multiple electronic devices before data transmission occurs. The data is encrypted with these pre-established keys, so when transmission is needed, the secure encryption is already in place. This preliminary setup allows convenient frequent sharing while maintaining security, as the encryption framework is prepared in advance rather than being a barrier to transmission.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system changes the parameter of authentication from a single static credential to multiple dynamic keys distributed across different devices. Each key can be independently managed and revoked. This parameter change enables flexible security control where authentication strength can be adjusted by adding or removing keys, allowing convenient sharing with appropriate security levels.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11089001B2Electronic apparatus and operation method thereof
Publication Date: 2021.08.10 SAMSUNG ELECTRONICS CO LTD
  • US11089001B2 patent drawing
  • US11089001B2 patent drawing
  • US11089001B2 patent drawing

AI summary

A method for operating an electronic apparatus according to an embodiment of the present invention may comprise the steps of: setting a first key for unlocking data stored in a first electronic apparatus; when the first electronic apparatus receives, from a second electronic apparatus, a second key set by the second electronic apparatus, transmitting by the first electronic apparatus, to the second electronic apparatus, first data locked using the first key and the second key; and when the first electronic apparatus receives, from the second electronic apparatus, a generation signal of a first event for the first data, transmitting the first key to the second electronic apparatus according to whether the first event is approved or not.