Decentralized Data Access Control Using Pseudo-Random Number Trees
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data access control methods require centralized management, which is costly, complex, and vulnerable to security breaches, as they rely on accounts and repositories that can be targets for malicious access.
Innovation Solution
A decentralized approach using a hierarchical tree of pseudo-random numbers (PRNs) to secure and control data access, where each data portion is associated with a leaf node, generated from a seed value, allowing for secure, uncoordinated address generation and storage without central coordination, employing large bit widths to prevent address guessing and collisions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If centralized management is used to control data access, then access control capability is improved, but system complexity and cost increase
Solution Approach 1:
The patent segments the centralized access control system into distributed components. Each user device generates its own access tokens locally using pseudo-random number generation, eliminating the need for a centralized repository. The system divides access control functionality across multiple independent nodes, reducing overall system complexity while maintaining control capability.
Solution Approach 2:
The patent introduces pseudo-random number trees as an intermediary mechanism between users and data. Instead of direct centralized authentication, users obtain access through cryptographic tokens derived from PRN trees, which mediate the access control process and eliminate the need for centralized user account management.
2Reliability
If centralized repository of access information is established, then access control is improved, but security vulnerability increases
Solution Approach 1:
The patent extracts the centralized repository of access information and removes it from the system. Access control information is generated and stored locally on user devices rather than in a centralized database, eliminating the security vulnerability of a central target for malicious attacks while preserving access control functionality.
Solution Approach 2:
The patent enables user devices to self-generate access tokens and manage their own access credentials using local pseudo-random number generation. Each device independently creates and manages its access information without relying on a centralized authority, reducing security vulnerabilities while maintaining access control.
3Ease of operation
If traditional access control methods are used, then access management is simplified, but cost and oversight requirements increase
Solution Approach 1:
The patent enables automated local generation of access tokens on user devices without requiring manual account creation or centralized provisioning. The system automatically generates cryptographic credentials using pseudo-random number trees, eliminating the need for costly manual oversight and reducing operational expenditures while simplifying access management.
Data Source
AI summary
Various embodiments are directed to techniques for controlling access to data in a decentralized manner. An apparatus includes an apportioning component to divide an item of data into multiple portions based on an organizational structure of the item of data; a tree component to generate a PRN tree including a multitude of nodes and a branching structure based on the organizational structure, the multitude including at least one branching node and multiple leaf nodes that correspond to the multiple portions; a PRN component to generate a PRN for each node of the multitude, the PRN component to use a PRN of a branching node of the PRN tree to generate a PRN for a leaf node that depends therefrom; and a communications component to transmit the multiple portions and multiple addresses based on PRNs of leaf nodes of the PRN tree to a server. Other embodiments are described and claimed.