Time-Dependent Access Token Obfuscation for Secure Data Retrieval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data access control systems lack the ability to effectively limit and manage access to data, particularly in terms of time and transparency, leading to security and privacy concerns.
Innovation Solution
A computer-implemented method using time-dependent transformations applied to data, reversible within a predetermined time window, which are managed on a distributed public ledger, ensuring secure and auditable access by combining elliptic curve cryptography and random number generation for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional access control systems are used to grant access to data, then data accessibility is improved, but data security and control over access timing deteriorate
Solution Approach 1:
The patent implements dynamic access control through time-dependent transformations that automatically change based on the current time. Access tokens are generated with time-bound transformation parameters that allow data reconstruction only within specific time windows, making the access control mechanism adaptive and time-sensitive rather than static.
Solution Approach 2:
The system changes the transformation parameters of data based on time conditions. Different time periods correspond to different transformation states, where data can be transformed into an accessible state within authorized time windows and into an inaccessible state outside these windows, thereby controlling access through parameter variation.
2Adaptability or versatility
If data is made accessible to third parties, then data utility is improved, but control over access timing and transparency deteriorates
Solution Approach 1:
The system performs preliminary actions by pre-defining time windows and transformation parameters before data access occurs. Access tokens are generated in advance with embedded time-dependent transformation rules, so that when data access is requested, the system can immediately apply the predetermined transformations without requiring real-time intervention or negotiation.
Solution Approach 2:
The system incorporates feedback mechanisms through the distributed public ledger that records all data access transactions. Each access event is logged with timestamp and transformation details, providing transparent feedback about who accessed what data and when, enabling auditability and accountability for data usage.
3Reliability
If complex encryption methods are used to secure data, then data security is improved, but system complexity and computational overhead increase
Solution Approach 1:
The patent segments the data protection mechanism into distinct components: the original data, transformation parameters, and time-dependent reconstruction functions. Each component can be independently managed and processed, reducing the complexity of implementing and maintaining the overall security system compared to monolithic encryption approaches.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
There is provided a computer-implemented method for managing third-party access to data, to increase data security and/or privacy. The method comprises receiving, from a third-party computer, a request to access data, wherein the request is indicative of at least one requested operation. A validity of each of the requested operations is determined in dependence on permission data stored in a distributed public ledger. The permissions data defines, for said third-party computer, a set of permissible operations and one or more permissible data attributes associated with each of the set of permissible operations. The request and the validity are logged in the distributed public ledger. For each of the requested operations, if the requested operation is valid, there is created, on the public ledger, an electronic token enabling the third-party computer to obtain access to one or more of the permissible data attributes associated with the requested operation, wherein the electronic token comprises information indicative of a location of the data attributes. A time-dependent transformation is applied to an element of the electronic token, and the electronic token is communicated from the public ledger to the third-party computer.