Transferable Access Tokens with Segmented Access Control for Secure Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional access tokens are non-transferable, limiting their use in scenarios where access needs to be shared or temporarily granted, such as allowing guests access to secured areas, and require revocation and re-issuance for access level changes, which is inconvenient.
Innovation Solution
The implementation of transferable access tokens that can be stored and shared between communication devices, allowing users to split, combine, or transfer these tokens based on interaction values, enabling flexible access control and authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If conventional access tokens are used, then security and authentication are maintained, but transferability and flexibility are lost
Solution Approach 1:
The access token is divided into two distinct components: a non-transferable credential portion that maintains security and authentication, and a transferable access portion that enables flexibility and sharing. This segmentation allows each part to fulfill its specific function without compromising the other.
Solution Approach 2:
The patent introduces an intermediary mechanism where the transferable access portion acts as a mediator between the credential and the resource access. This intermediary can be transferred between users while the original credential remains secure, enabling controlled sharing without compromising authentication security.
2Ease of operation
If access tokens are made transferable, then flexibility and ease of sharing are improved, but control over access levels and revocation becomes more complex
Solution Approach 1:
By segmenting the access control mechanism into credential and access portions, the system simplifies sharing operations while maintaining control. The transferable access portion can be easily shared without requiring complex management of the original credential.
Solution Approach 2:
The system introduces dynamic control mechanisms where the transferable access portion can be selectively revoked or restricted without affecting the original credential. This allows flexible access management where users can control who receives the transferable portion and under what conditions.
3Adaptability or versatility
If access tokens are bound to specific users, then authentication security is maintained, but usability in shared environments is reduced
Solution Approach 1:
The access control system is segmented into a non-transferable credential portion that prevents theft and impersonation, and a transferable access portion that enables shared environment usability. This segmentation resolves the contradiction by allowing each component to address its specific concern.
Solution Approach 2:
The system creates a copy of the access rights in the form of a transferable access portion that can be shared with others. This copy allows users to access resources in shared environments without transferring the original credential, thus maintaining security while enabling usability.
Data Source
AI summary
Methods and systems for provisioning transferable access tokens are disclosed. An access device associated with a resource provider can communicate with a first communication device as part of an interaction between a first user and the resource provider. The access device can generate an authorization request message comprising a first access token and an interaction value. The access device can transmit the authorization request message to an authorization computer. The authorization computer can authorize the interaction and generate an authorization response message. After authorizing the interaction, the authorization computer can provide a transferable access token to the first communication device. The first communication device can transmit the transferable access token to a second communication device, so that a second user can use the transferable access token in an interaction.