Secure Server Data Element Control via Digital Signature Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In IoT networks, communication devices with limited storage capabilities face challenges in controlling data usage and privacy, as once data is transmitted to remote servers, it becomes difficult to manage and protect, leading to potential misuse by attackers.
Innovation Solution
A secure server system that receives digital signatures from data owners, verifies conditions for data processing, and only deciphers and processes data when authorized, ensuring that data usage adheres to predefined criteria, such as time availability and payment verification, thereby controlling access to data elements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is transmitted from communication devices to remote servers, then data processing capability is improved, but data privacy control deteriorates
Solution Approach 1:
The patent segments data into multiple data elements that can be independently controlled and processed. Each data element can be authorized for specific processes separately, allowing fine-grained control over what data is processed where, thus maintaining privacy control while enabling data processing capabilities.
Solution Approach 2:
The patent introduces an intermediary authorization mechanism that mediates between data owners and process entities. This intermediary system verifies authorizations and controls data element access, enabling remote processing while maintaining privacy control through the mediating authorization verification layer.
2Adaptability or versatility
If data is made accessible to process entities, then service functionality is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The patent implements preliminary authorization verification before data elements are accessed or processed. Data owners pre-define authorized processes and data elements, and the system verifies these authorizations before allowing any access or processing, preventing unauthorized access while enabling legitimate service functionality.
Solution Approach 2:
The patent changes the state of data elements from fully accessible to conditionally accessible based on authorization parameters. Data elements are encrypted and can only be decrypted and processed when specific authorization conditions are met, transforming the access model from open to controlled based on predefined parameters.
3Reliability
If data elements are encrypted to protect privacy, then data security is improved, but data processing efficiency deteriorates
Solution Approach 1:
The patent extracts only the necessary authorization information and data element identifiers from the encrypted data structure. Instead of decrypting entire datasets, the system extracts and verifies minimal authorization tokens and metadata, enabling security verification without the computational overhead of full decryption and processing.
Data Source
Figure 1
Figure 2
AI summary
The invention relates to a method for controlling by a server (201) called secure server the use of a first set of at least one data element of a data owner and provided by a communication device (200), the method comprising the steps of: receiving (204) at least one digital signature representative of a process authorized by the data owner and adapted to carry out a series of at least one instructions using the first set of at least one data element; receiving (209) from a process entity (202) the series of at least one instruction, and a ciphered version of the first set of at least one data element which is communicated to the process entity (202) by the communication device (200); verifying that the series of at least one instruction correspond to a process authorized by the data owner of the communication device by comparing the at least one digital signature received (204) by the secure server (201) with a digital signature obtained by the secure server (201) using as an input the series of at least one instruction received by the secure server (201); and if the series of at least one instruction correspond to an authorized process: deciphering the first set of at least one data element; generating a result data by executing the series of at least one instruction using the first set of at least one data element as an input; transmitting the result data to the process entity (202).