PCMA Authorization Tokens for Secure Multi-Dataset Data Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data exchange systems lack a trusted authorization mechanism to ensure data privacy, authenticity, and quality management, making it difficult for buyers to evaluate data before payment and preventing sellers from data leakage during transactions.
Innovation Solution
A system utilizing polynomial commitment multiple access (PCMA) generates a single token for data evaluation, ensuring data privacy by encrypting datasets and using a commitment algorithm to maintain a constant token size, allowing buyers to evaluate data before payment while protecting seller data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted and multiple authorization tokens are generated for different datasets, then data privacy is protected, but the token size and complexity increase with the number of authorizations
Solution Approach 1:
The patent merges multiple authorization tokens into a single PCMA token that represents authorization for multiple datasets. The data exchange module combines individual authorization information (user identity, dataset identifiers, hash values, and encryption key ciphertexts) into one unified token structure, eliminating the need to manage separate tokens for each dataset while maintaining constant token size through polynomial commitment technology.
Solution Approach 2:
The patent introduces polynomial commitment technology as a new dimension to the authorization mechanism. By mapping authorization information to polynomial coefficients and using commitment schemes, the system achieves constant-size tokens that can represent arbitrary numbers of dataset authorizations, transforming the problem from scaling token size to scaling polynomial degree.
2Measurement precision
If buyers can evaluate full data before payment, then data quality assessment is improved, but data leakage risk to prospective buyers increases
Solution Approach 1:
The patent enables preliminary data evaluation through encrypted computation. Buyers can perform evaluation operations on encrypted datasets before completing the transaction, allowing quality assessment without actual data exposure. The system computes evaluation results on ciphertexts, so the preliminary action of evaluation occurs without decrypting the data first.
Solution Approach 2:
The patent introduces encrypted computation as an intermediary layer between the buyer and the data. Instead of directly accessing plaintext data for evaluation, the buyer interacts with encrypted data through cryptographic operations. The encryption scheme acts as a mediator that allows computation while preventing direct observation of the actual data values.
3Reliability
If traditional authorization mechanisms are used for each dataset, then data access control is maintained, but the number of tokens and management complexity increase
Solution Approach 1:
The PCMA token serves multiple functions simultaneously: it acts as an authorization token for accessing multiple datasets, a cryptographic commitment to the authorization policy, and a compact representation that can be verified efficiently. This universal token replaces what would otherwise require multiple separate authorization mechanisms, one for each dataset.
Solution Approach 2:
The patent changes the fundamental parameter of token representation from a scalable structure (where token size grows with the number of authorizations) to a fixed-size structure using polynomial commitments. By transforming the authorization representation into polynomial coefficients committed through cryptographic hashing, the system achieves constant token size regardless of the number of datasets authorized.
Data Source
AI summary
A system using trusted authorization mechanism based on PCMA for data exchange is provided. The system includes a data owner module, a data user module, and a data exchange module. The data owner module encrypts a data collection using an encryption key and generates an identifier, hash value of each data, and a ciphertext of each dataset. The data user module submits at least one request to the data owner module for accessing and evaluating datasets. The data owner module authorizes the datasets of the data collection. The data exchange module generates a single PCMA token based on the user's identity, the identifiers of the datasets, and the hash values of the authorized datasets. The data exchange module constructs the PCMA token using a polynomial commitment mechanism, allowing it to maintain a constant size regardless of the number of authorized data.