Secure External Link Binding via Account Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Organizations face security risks when sharing electronic files with external users, as existing methods lack control over access termination and require frequent authentication through access codes, which can be cumbersome for users with accounts on the same online storage platform.
Innovation Solution
A computing system that generates sharing links with access control mechanisms, including verification of external users through access codes and the option to bind shared content to the external user's account, allowing seamless access once authenticated, reducing the need for repeated access code entries.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control through access codes is implemented for external sharing, then security is improved, but ease of operation deteriorates due to frequent authentication requirements
Solution Approach 1:
The system performs preliminary authentication by sending access codes to external users before granting access to shared content. This preliminary action ensures security is established upfront, allowing subsequent access without repeated authentication for users with accounts on the same platform
Solution Approach 2:
External users with accounts on the same online storage platform can access shared content through their existing account authentication, eliminating the need for separate access code entries. The system leverages their existing credentials to provide self-service access, improving ease of operation while maintaining security
2Productivity
If external sharing is allowed for collaboration, then productivity is improved, but security risks increase due to potential data leaks
Solution Approach 1:
The system introduces an intermediary access control mechanism that mediates between external users and shared content. Access codes are transmitted through controlled channels, and the system verifies external user identities before granting access, reducing security risks while enabling collaborative productivity
Solution Approach 2:
The system applies differentiated access control quality to different users - external users receive access code verification while internal platform users benefit from integrated account authentication. This local quality approach ensures appropriate security measures are applied based on user type, enabling productivity while managing security risks
3Reliability
If access termination is tied to account changes, then security is improved, but device complexity increases due to binding mechanisms
Solution Approach 1:
The system merges the access control mechanism with the external user's existing account on the online storage platform. By binding shared content access to the user's account credentials, the system achieves automatic access termination when accounts change without requiring separate complex binding infrastructure
Solution Approach 2:
The access control system serves multiple functions: it provides initial access verification through codes, enables account binding for seamless access, and automatically terminates access when accounts change. This multi-functionality reduces the need for separate mechanisms, managing device complexity while improving security
Data Source
AI summary
A computing system includes a processor and a data store coupled to the processor. The computing system provides access to electronic content stored in the data store. A user interface component receives an indication of an external user with which to share an item of electronic content. A link generation component is generates a link to share the item of electronic content. An access control component receives a request from a requestor to access the item of electronic content using the link, and responsively verify an identity of a requestor. The user interface component provides access to the item of electronic content to the requestor if the identity was verified and receives a user input indicative of an external account binding request. The access control component determines if the requestor has authenticated with the external account and selectively binds the link to the external account if the user authenticates with the external account.