Third-Party Application Access with Split-Key Authorization

Solution Overview

Problem

Conventional methods for accessing third-party applications are vulnerable to security breaches, allowing malicious entities to steal user data by unauthorized access through viruses.

Innovation Solution

A method involving encryption of user identifiers using a key with first and second key information, generating an authorization credential, and accessing the application based on a detection result, ensuring that even if the first key is stolen, the encrypted user data remains secure.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If conventional authorization methods are used to access third-party applications, then ease of operation is improved, but security is worsened due to vulnerability to malicious data theft

Engineering Contradiction:

Improveease of accessing applicationVSAvoidsecurity of accessing application

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The encryption key is segmented into two distinct parts: first key information and second key information. The first key information is used for generating authorization credentials that are transmitted to third-party applications, while the second key information is retained by the user equipment for decryption. This segmentation ensures that even if the first key information is compromised, the second key information remains secure and can be used to decrypt and protect user data.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

An authorization credential acts as an intermediary mechanism between the user equipment and third-party applications. Instead of directly exposing user data or full encryption keys to third-party applications, the system uses this intermediate credential that contains only the first key information, preventing direct access to sensitive user data while still enabling authorized operations.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If user data is transmitted to third-party applications for access, then adaptability is improved, but security is worsened due to potential malicious access

Engineering Contradiction:

Improveability to access third-party applicationVSAvoidmalicious data theft

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The encryption key is segmented into two distinct parts: first key information and second key information. The first key information is used for generating authorization credentials that are transmitted to third-party applications, while the second key information is retained by the user equipment for decryption. This segmentation ensures that even if the first key information is compromised, the second key information remains secure and can be used to decrypt and protect user data.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

An authorization credential acts as an intermediary mechanism between the user equipment and third-party applications. Instead of directly exposing user data or full encryption keys to third-party applications, the system uses this intermediate credential that contains only the first key information, preventing direct access to sensitive user data while still enabling authorized operations.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Ease of operation

If encryption key is transmitted to third-party application for authorization, then ease of operation is improved, but security is worsened if the key is stolen

Engineering Contradiction:

Improveease of authorizationVSAvoidsecurity against key theft

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The encryption key is segmented into two distinct parts: first key information and second key information. The first key information is used for generating authorization credentials that are transmitted to third-party applications, while the second key information is retained by the user equipment for decryption. This segmentation ensures that even if the first key information is compromised, the second key information remains secure and can be used to decrypt and protect user data.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

An authorization credential acts as an intermediary mechanism between the user equipment and third-party applications. Instead of directly exposing user data or full encryption keys to third-party applications, the system uses this intermediate credential that contains only the first key information, preventing direct access to sensitive user data while still enabling authorized operations.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS20250232046A1Method for accessing application and apparatus, electronic device, and storage medium

Publication Date: 2025.07.17 TENCENT TECHNOLOGY (SHENZHEN) CO LTD

AI summary

Disclosed is a method for accessing software applications. The method includes obtaining an application access request, the application access request carrying a user identifier and an application identifier; acquiring an encryption key, and encrypting the user identifier by the encryption key, to obtain an encrypted user identifier, the encryption key carrying first key information and second key information; generating an authorization credential corresponding to the application access request according to the encrypted user identifier and the first key information; transmitting the authorization credential to the application that is to be accessed, the application that is to be accessed generating an authorization request based on the authorization credential; receiving the authorization request returned by the application that is to be accessed; and accessing, when the authorization request satisfies a preset condition, the application that is to be accessed based on the second key information.