Obscured URL Caching for Cloud Data Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is an increasing concern about the lack of privacy and security in cloud computing, particularly with regards to data access and personal information, as URLs can reveal sensitive information about devices and users, and current cloud platforms lack effective protection mechanisms.
Innovation Solution
The method involves generating an obscured URL using secret data associated with the original URL, allowing secure access to remote resources while maintaining privacy, by transforming the original URL into an unintelligible form that only authorized users can decipher, and using intermediate network nodes for caching and authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is transmitted between remote resources and data processing devices through cloud platforms, then connectivity and data access capability are improved, but privacy and security of personal information deteriorate due to URL exposure and lack of protection mechanisms
Solution Approach 1:
The patent introduces an intermediary mechanism that mediates between the data processing device and the remote resource. The intermediary generates obscured URLs that mask the actual resource location, allowing data access while protecting privacy. The intermediary acts as a trusted third party that translates between human-readable URLs and obscured versions without exposing sensitive information.
Solution Approach 2:
The patent transforms the URL parameter from its original human-readable form into an obscured form through cryptographic operations. The original URL containing sensitive information is converted into an obscured URL that maintains functionality but hides the underlying structure and sensitive data, effectively changing the parameter's representation while preserving its access capability.
2Ease of operation
If original URLs are used for accessing remote resources, then ease of operation and human readability are improved, but security and privacy protection deteriorate as URLs reveal sensitive device and user information
Solution Approach 1:
The patent segments the URL access process into two distinct phases: a human-readable phase for user interaction and an obscured phase for secure transmission. The original URL is separated from its obscured version, allowing each to serve its specific purpose - readability for users and security for network communication - without compromising either aspect.
Solution Approach 2:
The patent employs an intermediary service that bridges the gap between readable URLs and secure obscured URLs. This intermediary maintains both versions and performs the transformation, allowing the system to enjoy both readability and security benefits without requiring the end user to directly handle obscured URLs.
3Productivity
If cloud platforms store and process user data, then data aggregation and remote access functionality are improved, but trust and security control deteriorate as users have limited protection over their personal information
Solution Approach 1:
The patent applies parameter transformation to the data access mechanism, changing how data is located and retrieved from cloud storage. Instead of using direct URLs that expose data structure and location, the system uses obscured URLs that maintain the data aggregation capability while removing the exposure of underlying data organization and sensitive information.
Solution Approach 2:
The patent introduces an intermediary layer between the user and the cloud platform's data storage system. This intermediary manages the obscured URL generation and maintenance, allowing the cloud platform to continue aggregating and storing data efficiently while the intermediary protects user control by masking the data's true location and structure.
Data Source
AI summary
A method of accessing data sent between a remote resource and a data processing device, the method comprising: caching data uploaded from the remote resource or caching data sent to the remote resource at one or more intermediate network nodes between the data processing device and the remote resource; and accessing the cached data stored at the one or more intermediate network nodes.