Nested Web Token Encryption for Secure Multi-Recipient Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Single-encryption web tokens face limitations in concurrent operations, leading to buffering, processing, and data storage concerns, while multi-recipient tokens pose security risks due to unintended data access.
Innovation Solution
Implementing nested encryption protocol indicators in web tokens, where each recipient receives a portion encrypted with their unique key, allowing secure, concurrent data access without exposing data to unauthorized recipients.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If single-encryption web tokens are used, then security is maintained, but processing overhead and token management complexity increase due to needing multiple separate tokens for concurrent operations
Solution Approach 1:
The patent combines multiple encryption schemes into a single web token structure. The token includes both a first encrypted portion (encrypted with a first key) and a second encrypted portion (encrypted with a second key), allowing multiple recipients to access different data with a single token rather than requiring multiple separate tokens.
Solution Approach 2:
The web token is segmented into distinct encrypted portions, each protected by a different encryption key. The first encrypted portion contains data accessible by the first recipient using the first key, while the second encrypted portion contains data accessible by the second recipient using the second key, enabling concurrent access without interference.
2Quantity of substance
If multi-recipient web tokens are used, then storage efficiency improves and token management complexity reduces, but security risks increase due to potential unintended data access
Solution Approach 1:
Different portions of the web token have different encryption properties. The first encrypted portion is encrypted with a first key accessible only to the first recipient, while the second encrypted portion is encrypted with a second key accessible only to the second recipient. This local differentiation of encryption quality ensures that each recipient can only access their intended data, preventing unintended access while maintaining storage efficiency.
3Reliability
If multiple separate web tokens are issued for concurrent operations, then security is maintained, but buffering and processing concerns arise
Solution Approach 1:
Instead of issuing multiple separate web tokens for different recipients and operations, the patent merges them into a single multi-recipient web token. This single token contains multiple encrypted portions that can be processed concurrently by different recipients without requiring sequential handling or buffering, thus improving processing throughput while maintaining security through distinct encryption keys.
Data Source
AI summary
A method and related system for generating and securely sending multi-recipient web tokens includes obtaining a first key associated with a first key identifier and a second key associated with a second key identifier. The method includes generating a (1) first web token portion that includes the first identifier, the first key identifier, and first encrypted information encrypted with the first key and (2) a second web token portion that includes the second identifier, the second key identifier, and second encrypted information encrypted with the second key. The method includes issuing the web token to at least one of recipient identified in the web token.