Secure Content Sharing via Access Token and Key Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for sharing digital content over networks lack sufficient security measures, making valuable content vulnerable to breaches and fraudulent activities.
Innovation Solution
A computer-implemented method that involves receiving an authorization grant, obtaining an access token, requesting and using encryption or decryption keys from a key management system to securely encrypt or decrypt content items, ensuring secure sharing and access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital content is shared over networks using traditional methods (email attachments, file transfers), then ease of operation is improved, but security is worsened due to vulnerability to fraud and breaches
Solution Approach 1:
The patent segments the content sharing process into distinct phases: authentication phase (obtaining access token), key acquisition phase (requesting encryption key from KMS), and encryption phase (encrypting content). This segmentation allows each phase to be secured independently with appropriate security measures while maintaining ease of operation through automated workflows.
Solution Approach 2:
The patent introduces intermediaries to enhance security: an authorization server mediates between users and content, issuing access tokens; a key management system mediates key distribution, providing encryption keys only to authenticated users. These intermediaries protect against direct unauthorized access while maintaining user-friendly operation through standardized protocols.
2Reliability
If encryption and key management systems are integrated into content sharing workflows, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent employs universal components that perform multiple functions: the authorization server handles both authentication and access token issuance; the key management system provides both key generation and key distribution; the access token serves as both authentication proof and authorization credential. This multi-functionality reduces the number of separate components needed, thereby reducing overall system complexity while maintaining strong security.
Solution Approach 2:
The patent changes the state of security parameters dynamically: encryption keys are provided in encrypted form and decrypted only when needed; access tokens have expiration times and scope limitations; content is encrypted with keys that are revoked or rotated over time. These parameter changes enable security to be enforced without requiring permanently complex system states, allowing systems to remain simple between security operations.
3Adaptability or versatility
If standard provisioning workflows and key management systems are used, then adaptability is improved through integration with existing services, but implementation complexity is worsened
Solution Approach 1:
The patent performs preliminary actions by establishing authentication credentials and encryption keys before content sharing occurs. Users authenticate in advance to receive access tokens; encryption keys are pre-provisioned through the key management system. This preliminary setup, though requiring initial effort, enables seamless and secure content sharing thereafter, reducing implementation complexity for the actual sharing operations.
Solution Approach 2:
The patent uses copying of authentication credentials (access tokens) and encryption keys from centralized systems to distributed clients. Instead of implementing complex authentication and key management from scratch in each system, the patent copies proven security mechanisms from standardized services (OAuth 2.0 for authentication, cloud KMS for encryption), thereby improving adaptability while reducing implementation complexity through proven patterns.
Data Source
AI summary
Disclosed are techniques for securely sharing a content item. The techniques comprise receiving an authorization grant. The techniques also comprise utilizing the authorization grant to obtain an access token. The access token includes credentials for enabling access to a content item. The techniques further include requesting one of an encryption or decryption key from a key management system. The one of the encryption or decryption key facilitates encryption or decryption operations in connection with the content item. The techniques still further comprising performing an encryption or decryption operation in connection with the content item. The one of the encryption or decryption operation is performed using the corresponding one of the encryption or decryption key.