Secure Data Transfer System with Embedded Authorization Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transfer systems for sharing sensor data between services lack effective security measures to prevent data leakage, especially when handling frequent, small-sized data sets, and existing solutions like DRM are inefficient in managing access authorization, leading to increased network traffic.
Innovation Solution
A data transfer system that includes a management server for managing user and transfer settings, a data transfer apparatus for setting and transferring authorized data, and a data browsing apparatus for ensuring only authorized users can access the data, using user and browsing setting information to control access and encode data for secure transfer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If DRM is used to protect sensor data, then data security is improved, but it is not applicable to frequent small-sized data transmission and increases system complexity
Solution Approach 1:
The patent segments the protection mechanism into two parts: (1) authorization information is embedded within each data packet, and (2) a separate verification process is performed at the receiver. This segmentation allows frequent small data transmissions to be protected without applying the full overhead of DRM to each transmission, thus maintaining data security while reducing system complexity.
2Reliability
If access authorization is set for every set of data to be transmitted, then data security is improved, but network traffic increases significantly
Solution Approach 1:
The patent merges the authorization information with the data payload by embedding the authorization token within each data packet structure. This combining approach ensures that authorization verification is performed efficiently without requiring separate authorization transactions, thereby maintaining data security while minimizing additional network traffic overhead.
3Adaptability or versatility
If sensor data is shared between multiple services, then service versatility is improved, but security control becomes more difficult
Solution Approach 1:
The patent introduces an intermediary authorization token that mediates between the data source and multiple receiving services. This token contains encoded authorization information that enables multiple services to access and process the sensor data according to their specific needs, while the centralized authorization mechanism maintains security control without requiring complex point-to-point security configurations for each service pair.
Data Source
AI summary
A data transfer system includes a management server 1 for managing user information, browsing setting information that defines a user who can browse data, and transfer setting information that designates a transfer destination of the data, a data transfer apparatus 2 for setting, for the data, browsing authorization that allows only a specific user to browse the content of the data, based on the user information and the browsing setting information, and transferring the data for which the browsing authorization is set to the designated transfer destination based on the transfer setting information, and a data browsing apparatus 3 for determining whether or not a user has the browsing authorization that is set for the data, based on the user information, the browsing setting information, and the transfer setting information, and presenting the content of the data to the user if the user has the browsing authorization.