Service Access Control via Group Key Encryption

Solution Overview

Problem

Conventional methods for implementing multi-player online games face challenges in ensuring that invitees can successfully enter the same game table as the inviter, due to the likelihood of all seats being occupied by other users before the invitee enters, resulting in failed invitations.

Innovation Solution

A service accessing control method that generates a key for a service group, allowing clients to search for and encrypt a service component on a server, enabling all clients to access the encrypted service component and ensuring successful entry into the game table.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a conventional game table selection method is used where the inviter selects a game location and the system notifies the invitee, then the system structure is simple and easy to implement, but the invitation success rate is low because seats may be occupied by other users before the invitee enters

Engineering Contradiction:

Improveinvitation success rateVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The service component is encrypted with the group key in advance, before the invitee attempts to join. This preliminary encryption action ensures that when the invitee receives the notification and attempts to access the service component, it is already prepared and reserved for the group, preventing other users from occupying it. The encryption serves as a form of advance reservation and protection of the game location.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

A group key is introduced as an intermediary mechanism between the inviter and invitee. The group key serves as a shared secret that both parties use to encrypt and decrypt the service component. This intermediary key establishes a secure channel and ensures that only the intended group members can access the encrypted service component, thereby guaranteeing successful invitation while maintaining system simplicity.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If the inviter and invitee enter the game table at different times, then the system operation is flexible and convenient, but the invitee cannot guarantee that there is an empty seat available when they enter

Engineering Contradiction:

Improveoperation flexibilityVSAvoidseat availability

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The service component is encrypted with the group key in advance, before the invitee attempts to join. This preliminary encryption action ensures that when the invitee receives the notification and attempts to access the service component, it is already prepared and reserved for the group, preventing other users from occupying it. The encryption serves as a form of advance reservation and protection of the game location.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The service component is encrypted to create a protected copy that can be safely transmitted to the invitee. The encryption creates a secure representation of the service component that maintains its integrity and exclusivity to the group, allowing the invitee to access a guaranteed available seat without real-time coordination.

Inventive Principle:

Principle #26Copying

3Speed

If no encryption is used for the service component, then the access process is fast and simple, but the game resources are not protected and other users can access unauthorized game tables

Engineering Contradiction:

Improveaccess speedVSAvoidunauthorized access

Core Design Contradiction:

SpeedVSObject-affected harmful factors

Solution Approach 1:

A group key is introduced as an intermediary mechanism between the inviter and invitee. The group key serves as a shared secret that both parties use to encrypt and decrypt the service component. This intermediary key establishes a secure channel and ensures that only the intended group members can access the encrypted service component, thereby guaranteeing successful invitation while maintaining system simplicity.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The service component's state is changed from unencrypted to encrypted form. By applying the group key encryption, the service component transforms into a protected state that can only be accessed by those possessing the corresponding decryption key. This parameter change (from plaintext to ciphertext) provides security while maintaining access efficiency for authorized users.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS8656151B2Service accessing control method, terminal and system

Publication Date: 2014.02.18 TENCENT TECHNOLOGY (SHENZHEN) CO LTD

AI summary

Embodiments of the present invention provide a service accessing control method, including generating a service group comprising more than one client, and generating a key for the service group; searching for, by the more than one client in the service group, a service component on a server, encrypting, by a client who first searches out the service component, the service component with the generated key; and accessing, by the other clients in the service group, the encrypted service component with the generated key. The embodiments of the present further also provide a terminal and system corresponding to the method. By the embodiments of the present invention, it can be guaranteed that a invitation flow is not disturbed by external users, thereby increasing the success rate of the invitation.