Signature Chain Authentication With Obfuscated User Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing video conferencing systems face challenges in securely authenticating users while protecting sensitive personal information, as signature chains are resistant to tampering but do not allow users to delete or modify personal data without affecting the chain's integrity.
Innovation Solution
A method where personal information is not stored directly in the signature chain but is represented by a proxy value generated through cryptographic hashing or encryption, allowing users to control its visibility and deletion without compromising the chain's integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If personal information is stored directly in the signature chain, then user authentication reliability is improved, but user privacy and data control are worsened
Solution Approach 1:
The patent introduces a proxy value as an intermediary between the personal information and the signature chain. Instead of storing actual personal information (PI) directly in the chain, the system stores a proxy value that represents the PI. This proxy value is generated through cryptographic hashing or encryption, allowing the signature chain to verify user identity without containing sensitive personal data, thus resolving the contradiction between authentication reliability and privacy protection.
Solution Approach 2:
The patent extracts the sensitive personal information from the signature chain by replacing it with a proxy value. The actual PI is taken out of the public-facing signature chain and stored separately in a private database, while only the proxy value remains in the signature chain for authentication purposes. This extraction allows the system to maintain authentication functionality while removing sensitive data from the public view.
2Measurement precision
If personal information is stored in the signature chain, then authentication detail is improved, but user ability to delete or modify data is worsened
Solution Approach 1:
The proxy value serves as a mediator that decouples the signature chain from the actual personal information storage. Since the signature chain only contains the proxy value and not the raw PI, users can delete or modify their personal information in the private database without affecting the integrity or contents of the signature chain. This allows detailed authentication while providing full data deletion flexibility.
Solution Approach 2:
The patent segments the storage of personal information into two separate components: the proxy value in the signature chain for authentication purposes, and the actual personal information in a private database for storage and management. This segmentation allows independent manipulation of each component - the signature chain maintains authentication detail while the private database can be freely modified or deleted by the user.
3Object-affected harmful factors
If cryptographic hashing is used to represent personal information, then data privacy is improved, but system complexity is worsened
Solution Approach 1:
The proxy value acts as a simple intermediary that uses standard cryptographic hashing or encryption to represent personal information. While cryptographic operations add some complexity, the proxy value approach simplifies the overall system architecture by eliminating the need for complex data obfuscation mechanisms throughout the entire system. The hashing/encryption is applied only at the point of storage, making the complexity manageable and localized.
Data Source
AI summary
One example method includes receiving identification information associated with a new user device, the new user device associated with the user; accessing a signature chain associated with the user, the signature chain comprising one or more sequential records; associating user personal information with the new user device; generating a cryptographic signature based on cryptographic keys associated with the new user device; generating an obfuscated representation of the user personal information; generating a record comprising the identification information, the user personal information, the cryptographic signature, and the obfuscated representation of the user personal information; generating a cryptographic identifier based on the identification information, the cryptographic signature, the obfuscated representation of the user personal information, and a latest of the one or more sequential records; inserting the cryptographic identifier into the record; appending the record to the signature chain as a sequential record; receiving a request to join a video conference from the user device, the request identifying the new client device and the user as a participant in the video conference; and authenticating the user based on the record.