Multi-User Credential Suspension Using Anonymous Protection Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face inefficiencies in managing multiple user credentials on a single electronic device, particularly in securing and suspending transactions when the device is lost or stolen, while maintaining user privacy and security.
Innovation Solution
Implementing a system with user-anonymous suspension tokens that associate credentials with a particular user at the credential protection subsystem but not at the device protection subsystem, preventing the linking of users to a specific device, and using a device protection server to manage credential suspension.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If multiple native payment credentials are stored on a single electronic device for different users, then credential accessibility and convenience are improved, but security and privacy management become more complex and vulnerable
Solution Approach 1:
The patent segments credential management by introducing user-specific identifiers and suspension tokens that associate credentials with particular users rather than the device itself. This segmentation allows multiple users to have access to credentials on a single device while maintaining individualized control and suspension capabilities, thereby improving accessibility without proportionally increasing security management complexity.
Solution Approach 2:
The patent introduces an intermediary mechanism (suspension tokens and user identifiers) between the device and the credentials. This intermediary layer enables the device protection server to manage and suspend credentials without directly exposing the complex security architecture to users, simplifying the user experience while maintaining robust security management.
2Reliability
If device protection service suspends all credentials when device is lost or stolen, then security is improved, but user privacy is compromised by linking all users to the device
Solution Approach 1:
The patent segments the association between users and device protection by implementing user-anonymous suspension tokens. Instead of directly linking all user credentials to the device identifier, each user's credentials are associated with a unique suspension token that is anonymized at the device protection level. This allows the device protection server to suspend credentials security-wise while preventing the exposure of which specific users are affected, thus protecting user privacy.
Solution Approach 2:
The suspension token acts as an intermediary that decouples the direct link between device identifier and user identity. The token enables the device protection server to perform security operations without accessing or exposing user identification information, thereby maintaining security protection while preserving user privacy.
3Ease of operation
If user identifiers are stored at the device protection server for credential suspension, then credential control is improved, but user privacy and security are reduced due to direct linking
Solution Approach 1:
The patent segments the identifier system into two distinct levels: user identifiers stored at the credential protection subsystem for operational control, and anonymized suspension tokens stored at the device protection subsystem for security operations. This segmentation allows credential control to be maintained through user identifiers while preventing direct linking at the device protection level, thereby preserving user privacy and security.
Solution Approach 2:
The patent applies local quality by storing different types of identifiers at different subsystems with different purposes. User identifiers are stored locally at the credential protection subsystem where they are needed for credential control operations, while only anonymized suspension tokens are stored at the device protection subsystem. This localized storage strategy enables credential control functionality while minimizing privacy exposure.
Data Source
AI summary
Systems, methods, and computer-readable media for managing credentials of multiple users on an electronic device are provided.