Secure URL Sharing via Smartphone Push Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for sharing URLs lack adequate security, as obfuscated URLs can be accessed by unauthorized users through brute-force methods, making them insecure.

Innovation Solution

A method that associates a URL with a resource, where access is granted only after a verification process, typically involving a push notification to a smartphone, ensuring that only authorized users can access the resource, which may include additional authentication steps like password entry or specific time constraints.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If obfuscated URLs are used for sharing, then ease of operation is improved, but security deteriorates as unauthorized users can access through brute-force methods

Engineering Contradiction:

ImproveURL sharing convenienceVSAvoidaccess security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary verification by sending a push notification to the recipient's smartphone before granting URL access. This advance action ensures that only the intended recipient can access the obfuscated URL, preventing brute-force attacks while maintaining sharing convenience.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

A server acts as an intermediary between the URL and the user. The server receives the obfuscated URL, verifies user identity through push notification, and then provides access to the resource. This intermediary layer secures the sharing process without complicating the user experience.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If push notification verification is implemented, then security is improved, but device complexity increases due to smartphone integration requirements

Engineering Contradiction:

Improveaccess securityVSAvoidsystem architecture

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The server performs multiple functions: it hosts the obfuscated URL, manages push notification delivery, verifies user identity, and provides access to the resource. This multi-functionality reduces the need for separate verification systems, maintaining security while limiting complexity growth.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Reliability

If verification process is added to URL access, then security is improved, but loss of time increases due to additional authentication steps

Engineering Contradiction:

Improveaccess securityVSAvoidaccess time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The verification process uses periodic push notifications that can be quickly acknowledged by the user. This periodic, interrupt-based approach minimizes the time burden compared to continuous authentication, as the user only needs to respond when notified rather than undergoing prolonged verification.

Inventive Principle:

Principle #19Periodic action

Data Source

PatentUS20210168611A1Method for securely sharing a URL

Publication Date: 2021.06.03 CYPHERCOR INC

AI summary

A method is disclosed wherein a URL is associated with a resource. The URL is for use in accessing the resource. A smartphone is associated with a recipient. The URL is provided to the recipient. When the URL is accessed by a request for access to the resource relying upon the URL, transmitting from a server to the smartphone a push notification. When the push notification is responded to, allowing access to the resource via the communications network in dependence upon the response.