Proxy Service Decrypts Encrypted Credentials for Secure Third-Party Transmission

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing systems face challenges in securely transmitting user credentials to third-party services, as they cannot ensure that encrypted credentials are decrypted and sent to the correct destination, potentially leading to unauthorized exposure.

Innovation Solution

An information security proxy service intercepts and decrypts sensitive data, verifies the destination information, and only forwards the decrypted credentials to the intended third-party service, using symmetric and public keys for encryption and authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If user credentials are encrypted by a user device before transfer, then security against unauthorized exposure is improved, but the system cannot determine whether the encrypted data is transmitted to the correct destination

Engineering Contradiction:

ImprovesecurityVSAvoiddestination verification capability

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The patent applies preliminary action by embedding destination information into the encrypted credentials before transmission. The user device incorporates the destination identifier (such as a domain name or URL) within the encrypted credential structure, so that the information is prepared in advance for verification at the receiving end, enabling the system to determine correct destination transmission.

Inventive Principle:

Principle #10Preliminary action

2Ease of operation

If basic authentication with username and password is used, then ease of operation is improved, but significant effort and resources are required to prevent security breaches

Engineering Contradiction:

Improveauthentication simplicityVSAvoidsecurity

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent extracts the sensitive credential data from the transmission process by encrypting it before sending. Instead of transmitting plaintext usernames and passwords, the system extracts only the necessary authentication information, encrypts it, and transmits the encrypted form, thereby maintaining ease of operation while significantly improving security.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces encryption as an intermediary mechanism between the user device and the integrating service. This intermediary process transforms plaintext credentials into encrypted form, allowing the authentication system to function normally while adding a security layer that prevents unauthorized exposure during transmission.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Speed

If encrypted credentials are transmitted without destination verification, then transmission speed is improved, but unauthorized exposure risk increases

Engineering Contradiction:

Improvetransmission speedVSAvoidunauthorized exposure risk

Core Design Contradiction:

SpeedVSObject-affected harmful factors

Solution Approach 1:

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS10979403B1Cryptographic configuration enforcement

Publication Date: 2021.04.13 AMAZON TECH INC

AI summary

A system and method for providing data such as credentials to a third-party service while protecting the data from being transmitted to unintended locations. The system receives a first request containing encrypted data and information identifying the third-party service, validates that the first request is to be transmitted to the third-party service, generates a second request by replacing the encrypted data from the first request with unencrypted data, and transmits the second request to the third-party service.