Short-Range Transceiver Provisioning of Secure Memory Blocks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to provide secure and user-controlled access to personal data, especially in scenarios where entities with different data retention and sharing policies interact, leading to potential unauthorized access and increased risk of data breaches.
Innovation Solution
A system utilizing a short-range transceiver, such as a contactless card, interacts with a client device to create and manage a secure memory block, encrypting personal user data with a data storage key and ensuring authorized access through a data access key, leveraging a server for user authentication and key management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If personal user data is stored on client devices and shared with multiple entities, then data accessibility and utility are improved, but security and risk of unauthorized access deteriorate
Solution Approach 1:
The system segments user data into distinct data elements and implements fine-grained access controls for each element. Different entities receive access to specific data elements based on their needs, rather than granting blanket access to all data. This segmentation allows multiple entities to access necessary data while maintaining security boundaries.
Solution Approach 2:
The patent implements location-aware and context-aware access controls where data access permissions vary based on the user's location, device, time, and other contextual factors. Each data element can have different access rules applied locally based on specific conditions, enabling secure access adaptability to different scenarios.
2Ease of operation
If traditional log-in credentials are used for account access, then ease of operation is improved, but security deteriorates due to credential compromise risks
Solution Approach 1:
The system introduces biometric authentication and device-based authentication mechanisms as intermediaries between the user and the account system. Instead of directly using passwords, the user's biometric data or device credentials serve as a secure intermediary that verifies identity without exposing traditional credentials that can be compromised.
Solution Approach 2:
The patent replaces the mechanical system of typing passwords and managing credentials with biometric scanning and cryptographic authentication. Fingerprint sensors, facial recognition, and secure enclave-based authentication substitute for traditional keyboard-based credential entry, eliminating the security vulnerabilities associated with password management.
3Adaptability or versatility
If entities implement different data retention and sharing policies, then organizational flexibility is improved, but data security and user control deteriorate
Solution Approach 1:
The system implements dynamic access controls where permissions, retention periods, and sharing policies can be adjusted in real-time based on user preferences, contextual factors, and organizational requirements. Data access rights are not static but can be modified, revoked, or extended as conditions change, allowing both organizational flexibility and user control.
Solution Approach 2:
The patent incorporates feedback mechanisms where users receive notifications about data access requests, policy changes, and can provide input that influences data handling. The system continuously monitors and adjusts data access based on user feedback and policy updates, ensuring user control while accommodating organizational needs.
Data Source
AI summary
Systems and methods for controlling data access through the interaction of a short-range transceiver, such as a contactless card, with a client device are presented. Data access control may be provided in the context of creating and accessing a secure memory block in a client device, including handling requests to obtain, create, and access a secure memory block via the interaction of a short-range transceiver, such as a contactless card, with a client device such that, once the secure memory block is created in memory of the client device, personal user data may be stored in the secure memory block, and access to the stored personal user data may only be provided to users authorized to review the data.