Secure Data Distribution via Transient Tokens and Orchestration Rules
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic payment processes involve multiple parties that do not need access to all the information created and communicated during a transaction, leading to security concerns and difficulties in tracking transaction states due to replication and data integrity issues.
Innovation Solution
A computer-implemented method and system that securely distribute data among multiple parties by generating a data capture object with orchestration rules and public keys, digitally signing it, and transmitting it to a first system, which then generates and distributes a transient token to each party based on the orchestration rules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all transaction information is exposed to multiple parties, then each party can fulfill their role, but security concerns increase and data integrity becomes difficult to maintain
Solution Approach 1:
The patent segments transaction data into multiple versions, where each party receives only the data version necessary for their specific role. This is achieved through generating party-specific data representations from a master transaction record, ensuring each party gets customized data access rather than universal access to all transaction information.
Solution Approach 2:
The patent introduces a data distribution system as an intermediary that manages and controls data flow between parties. This intermediary system generates and distributes customized data representations, tracks data access, and maintains the master transaction record, thereby preventing direct exposure of all data to all parties while ensuring reliable data integrity.
2Productivity
If data is passed to multiple parties, then transaction processing can be completed, but tracking the state of the message and transaction becomes difficult due to replication issues
Solution Approach 1:
The data distribution system acts as a central intermediary that maintains the master transaction record and generates all party-specific data representations. This single source of truth eliminates replication issues, as the intermediary can track and control all data distributions from one centralized location, simplifying state tracking despite multiple parties receiving data.
Solution Approach 2:
The patent creates customized copies of transaction data for each party based on the master record, rather than distributing the original data. Each party receives a tailored copy that contains only their necessary information, reducing the complexity of tracking actual data states while maintaining productivity through efficient data distribution.
3Loss of information
If unnecessary data is exposed to parties, then they may have complete information, but access points for intruders increase
Solution Approach 1:
The patent applies local quality by providing each party with data customized to their specific needs and role in the transaction. Instead of giving all parties identical complete information, each party receives a locally optimized data set that contains exactly what they need, minimizing exposed access points while maintaining functional completeness for each party's tasks.
Data Source
AI summary
A method, system, and computer program product is provided for secure data distribution. The system includes at least one processor programmed or configured to receive, from a first system, a data capture request, generate a data capture object including a plurality of orchestration rules and a first public key, digitally sign the data capture object with a second private key corresponding to a second public key, transmit the data capture object to the first system, receive encrypted user data including user data encrypted with the first public key, generate a transient token based on the user data and the plurality of orchestration rules, and distribute the transient token to each party of the plurality of parties by transmitting the transient token to the first system via a device.