Trusted Assertion Service for Data Provenance Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional data marketplaces lack robust mechanisms for verifying the integrity, provenance, and chain-of-handling of data, making it difficult for data consumers to trust the authenticity and origin of the data they access.

Innovation Solution

A trusted data management architecture that securely records information about data provenance and chain-of-handling using a trusted assertion service, allowing data consumers to authenticate and verify the origin and processing history of data through cryptographically signed assertions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional data marketplaces are used, then data access and distribution are simplified, but the ability to verify data integrity, provenance, and chain-of-handling is insufficient

Engineering Contradiction:
Improvedata trustworthinessVSAvoidverification mechanism complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a trusted assertion service as an intermediary between data providers and data consumers. This service receives cryptographically signed assertions from data providers about data provenance and integrity, then provides these verified assertions to data consumers. This mediator resolves the contradiction by enabling reliable data verification without requiring complex verification mechanisms to be implemented directly in the data marketplace infrastructure.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces manual or conventional verification mechanisms with cryptographic verification. Instead of relying on trust-based or administrative verification processes, the system uses cryptographic signatures and blockchain technology to automatically verify data provenance and integrity. This substitution enables robust verification while maintaining system simplicity, as the cryptographic mechanisms handle the complexity automatically.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If data provenance and chain-of-handling information is recorded and verified, then data authenticity is enhanced, but system complexity and processing overhead increase

Engineering Contradiction:
Improvedata authenticityVSAvoidsystem architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the verification functionality into a separate trusted assertion service, distinct from the core data marketplace operations. Data providers submit assertions to this specialized service, which then makes verification information available to consumers. This segmentation allows comprehensive provenance tracking without complicating the overall marketplace architecture, as the verification subsystem operates independently.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent uses cryptographic copying of provenance information through digital signatures. Instead of storing and managing complex verification records throughout the system, the original provenance data is signed cryptographically, and these signature copies are distributed and verified wherever needed. This copying approach maintains data authenticity while avoiding the need for complex centralized verification storage and management.

Inventive Principle:
Principle #26Copying

3Measurement precision

If cryptographic verification mechanisms are implemented, then data integrity verification is strengthened, but processing time and computational resources increase

Engineering Contradiction:
Improveintegrity verification accuracyVSAvoidverification processing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent performs cryptographic signing of data provenance information in advance, when data is first provided to the marketplace. The trusted assertion service receives and validates these pre-signed assertions, making verification information ready before data consumers need it. This preliminary action eliminates the need for time-consuming cryptographic operations at the point of data consumption, as verification can be performed using already-computed signatures.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent extracts the computationally intensive cryptographic verification operations from the data consumption process and consolidates them in the trusted assertion service. Data consumers only need to request and receive pre-verified assertions, while the heavy lifting of cryptographic validation is performed once by the assertion service during assertion submission. This extraction reduces verification time for end users while maintaining security.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS20230252181A1Content management systems and methods
Publication Date: 2023.08.10 INTERTRUST TECH CORP
  • US20230252181A1 patent drawing
  • US20230252181A1 patent drawing
  • US20230252181A1 patent drawing

AI summary

This disclosure relates to, among other things, systems and methods for managing electronic content. Certain embodiments disclosed herein provide for a trusted data management platform that may interact with a trusted assertion service and/or a digital rights management service to manage access to and/or use of electronic content. Content creators and/or other content rights holder may register their content and/or associate rights using the trusted data management platform and/or a trusted assertion service and be assured that their content rights are securely managed and respected.