Secure Content Sharing via Token-Based Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing clipboard-based content sharing mechanism in electronic devices poses security risks, especially when sensitive information like usernames and passwords are shared, as unauthorized applications can access and manipulate the clipboard content without user awareness.
Innovation Solution
Implementing a secure content sharing method using tokens, where a token is generated and associated with authorized applications, and only authorized recipients can access the content by verifying the token with the provider application, enhancing security through token-based authentication and authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If clipboard-based content sharing is implemented, then content sharing between applications is enabled, but security risks increase due to unauthorized access and manipulation of clipboard content
Solution Approach 1:
The patent introduces a token as an intermediary element between the content provider and the clipboard system. The token serves as a mediator that carries authorization information, allowing the system to maintain content sharing functionality while preventing unauthorized access. The token is generated by the content provider and must be validated, thus mediating the trust relationship between applications.
Solution Approach 2:
The patent segments the content sharing process into distinct phases: content generation with token creation, token transmission, and token validation before clipboard access. This segmentation allows each phase to be secured independently, with the token acting as a separate authorization mechanism that decouples the content itself from the access control logic.
2Reliability
If token-based authentication is implemented, then security of content sharing is improved, but system complexity increases due to token generation, validation, and authorization management
Solution Approach 1:
The token serves multiple functions simultaneously: it acts as an authorization credential, carries content identification information, and provides a mechanism for validating user identity. By making the token multi-functional, the patent reduces the need for separate authentication and authorization components, thereby limiting the increase in system complexity.
3Reliability
If clipboard access is restricted to authorized applications only, then security is improved, but ease of operation decreases due to additional authentication steps
Solution Approach 1:
The system performs preliminary action by pre-validating the token and establishing authorization before allowing clipboard access. The token is validated in advance, and authorized applications are pre-identified, so that when content sharing is needed, the authentication is already complete and the user simply needs to perform the basic copy-paste operation without additional steps.
Data Source
AI summary
Systems, methods, and software can be used to share content. In some aspect, a first user input for copying a content is received at a first application on a mobile device. A token that is associated with the content is generated. A Uniform Resource Identifier (URI) is sent from the first application to a clipboard application. A second user input for pasting the content is received at a second application on the mobile device. The token is received at the second application from the clipboard application. A request for the content is received from the second application. The request includes the token. Whether the second application is authorized to receive the content is determined at the first application. In response to determining that the second application is authorized to receive the content, the content is provided to the second application.