Resource Access via Authorized User Digital Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authorization methods for accessing computing resources require users to have usernames, passwords, or other credentials, which can be cumbersome and inefficient, especially for one-time or temporary access scenarios.
Innovation Solution
A method where unauthorized users can access resources if a sufficient number of authorized users indicate permission, either by responding to access requests or providing public digital keys, eliminating the need for the user to have specific credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional authorization methods (usernames, passwords, credentials) are used to access computing resources, then security and access control are maintained, but the process becomes cumbersome and inefficient especially for one-time or temporary access scenarios
Solution Approach 1:
The patent introduces authorized users as intermediaries who vouch for the requesting user's legitimacy. Instead of requiring the user to provide credentials or administrators to create accounts, the system uses existing authorized users to endorse access requests through digital signatures or approvals, thereby simplifying the access process while maintaining security
Solution Approach 2:
The system performs preliminary authorization by having authorized users pre-approve or pre-sign off on potential access requests. This preliminary action eliminates the need for real-time credential verification or account creation, as the authorization is established in advance by trusted users
2Productivity
If temporary accounts or passwords are created for one-time access, then access control is maintained, but the overhead of account management increases
Solution Approach 1:
The patent extracts the credential management step entirely from the access process. Instead of creating temporary accounts or generating passwords, the system directly validates access requests through digital signatures from authorized users, eliminating the complexity of account lifecycle management while maintaining fast access grants
Solution Approach 2:
The system uses digital signatures as a copy of authorization rather than creating physical or logical account copies. The signature serves as a portable, verifiable proof of authorization that can be validated without maintaining account records, reducing management overhead
3Reliability
If usernames and passwords are required for resource access, then security is maintained, but the user experience deteriorates due to credential requirements
Solution Approach 1:
The patent replaces the mechanical credential system (usernames, passwords, account creation) with a digital signature-based endorsement system. Authorized users sign the access request, and the system validates the signature cryptographically, maintaining security while eliminating the need for users to remember or provide credentials
Data Source
AI summary
A user who is currently unauthorized to access a resource sends a request to access the resource. It is determined whether a number of authorized users of the resource who have indicated that the user should be permitted to access the resource satisfies the threshold condition. If the number of authorized users who have indicated that the user should be permitted access satisfies the threshold condition, the user is permitted to access the resource. The threshold condition can be based on replies received responsive to messages sent to the authorized users of the resource asking whether the user should be permitted to access the resource. The threshold condition can be based on public digital keys of the authorized users from the user.