Temporary Access Token Revocation via Device Motion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Shared devices, such as TVs or desktop computers, continue to access personal information even after the original user has stopped using them, allowing unauthorized users to access sensitive data due to the persistence of access tokens.
Innovation Solution
Implementing a system where a personal user device monitors its physical movement and, upon detecting predefined motion criteria, revokes access privileges associated with an access token, preventing further access to personal information on shared devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If access tokens are used to enable shared device access to personal information, then ease of operation is improved, but security deteriorates because subsequent users can access the first user's personal information
Solution Approach 1:
The system performs preliminary actions by establishing a temporary access token with limited validity period before the user leaves. The access token is automatically revoked after the predefined time period expires, preventing subsequent users from accessing personal information without requiring manual intervention to revoke access.
Solution Approach 2:
The patent changes the parameter of access token validity by implementing a predefined time period that limits the duration of access. The access token transitions from an indefinitely valid state to a time-limited state, automatically expiring after the specified duration to secure personal information against unauthorized access.
2Reliability
If access tokens remain valid indefinitely, then reliability of access is improved, but security deteriorates due to persistent access privileges
Solution Approach 1:
The system automatically revokes access privileges in advance by setting a predefined time period for the access token. This preliminary action ensures that access is terminated before any potential unauthorized use can occur, balancing reliability of access during the valid period with security after expiration.
Solution Approach 2:
The access token is designed as a short-living credential that is automatically discarded after the predefined time period. This disposable approach replaces indefinitely valid access tokens with temporary ones that expire automatically, maintaining access reliability during the valid period while eliminating persistent access risks.
3Object-affected harmful factors
If the personal user device continuously monitors movement to revoke access, then security is improved, but device complexity increases
Solution Approach 1:
The personal user device autonomously monitors its own movement and automatically triggers access revocation without requiring external intervention or complex manual processes. The device uses its built-in location services to detect movement and autonomously manages the access token revocation, minimizing the need for additional complex systems.
Solution Approach 2:
The patent replaces complex mechanical or manual security systems with electronic location-based monitoring. Instead of physical security measures or manual revocation processes, the system uses electronic location services and automated software protocols to monitor device movement and manage access privileges, reducing overall system complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method executes at a personal user device associated with a user. The method receives a request from a shared user device, the request seeking access to personal information associated with the user. The personal information is stored at a resource server. The method receives access authentication information from the user. The method then sends the access authentication information to an authentication server, and receives an access token. The access token grants access privileges to the personal information. The method sends the access token to the shared user device, thereby permitting an application executing on the shared user device to use the access token for retrieving at least a portion of the personal information. The method detects a physical movement of the personal user device, then sends a message to the authentication server to revoke access privileges associated with the access token.