Signature Data Access Control Using Split-Key Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transmission systems lack multi-modal security for sensitive data, relying on a single vector for decryption and transmission, which increases vulnerability to security breaches.
Innovation Solution
A multi-modal system employing two-factor authentication through session and access codes, using a centralized server for real-time encryption and decryption of sensitive data, with an expiry window to mitigate security risks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single-vector system is used for data transmission and decryption, then the system complexity is reduced, but security vulnerability increases
Solution Approach 1:
The patent segments the decryption key into two separate components: a session key transmitted through one vector and an access code transmitted through a different vector. This segmentation ensures that even if one transmission channel is compromised, the complete decryption key cannot be obtained, thereby resolving the contradiction between system simplicity and security vulnerability.
2Reliability
If two-factor authentication is implemented, then security is improved, but system complexity increases
Solution Approach 1:
The patent introduces a server as an intermediary that automatically manages the generation, transmission, and verification of session keys and access codes. This intermediary handles the complex authentication logic, allowing the client systems to remain relatively simple while still achieving strong two-factor authentication security.
3Reliability
If real-time encryption and decryption is implemented, then data security is improved, but processing time increases
Solution Approach 1:
The patent performs preliminary encryption of the session key before transmission, and the receiving system performs preliminary verification of the access code format before attempting decryption. These preliminary actions prevent unnecessary decryption attempts and reduce overall processing time while maintaining strong security protocols.
Data Source
AI summary
A request is generated including a session identification (ID), an access code, and a sign ID. A lookup key is created using the sign ID and the access code. A contents key is created using the access code, the session ID, and the sign ID. The contents key encrypts content associated with the request. The encrypted content, the look up key, and the contents key are stored at a database. A link is sent to a client device. The link includes the sign ID and the session ID. The access code is received at the facilitation webpage. The sign ID, session ID, and the access code are sent from the facilitation webpage to the database. The content is decrypted based on the contents key, the sign ID, the session ID, and the access code. A captured signature is encrypted using the contents key and stored at the database.