User Agent Data Abstraction for Privacy Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current user information management systems, such as Self-Sovereign Identity (SSI) and distributed ledgers, face challenges in controlling the distribution of user information, including abstraction of user data, update management, and transparency in data transfer destinations.
Innovation Solution
A user information management system comprising a user terminal, a user agent, and a service provider server, where the user agent stores user information and provides a privilege transfer unit to manage and abstract user data based on service requests, ensuring user control over data distribution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If user information is transmitted to service providers using SSI, then users can control their personal information, but unnecessary detailed information (e.g., exact birth date) is transmitted instead of abstracted information
Solution Approach 1:
The patent extracts only the necessary attribute (adult status) from the complete user information (birth date), transmitting only the extracted essential characteristic rather than the full detailed information. This resolves the contradiction by removing unnecessary details while maintaining the core functional requirement.
Solution Approach 2:
The patent changes the parameter of information granularity by transforming specific detailed data (exact birth date) into abstracted categorical data (adult status). This parameter transformation allows privacy protection while maintaining service functionality.
2Reliability
If user information is transmitted to service providers, then service providers can verify user attributes, but users cannot control subsequent distribution of their information to third parties
Solution Approach 1:
The patent implements dynamic control where users can revoke or modify information distribution permissions at any time. The system transitions from static information sharing to dynamic, revocable permission management, allowing users to adapt their information distribution control based on changing requirements.
Solution Approach 2:
The patent establishes a feedback mechanism where users are notified of information distribution events and can provide feedback by revoking permissions. This closed-loop control allows users to monitor and adjust their information distribution preferences based on actual usage patterns.
3Reliability
If complete user information is stored and transmitted, then service providers have all necessary data for verification, but user privacy is compromised by transmitting more information than needed
Solution Approach 1:
The patent extracts only the essential verification attribute (adult status) from complete user information, transmitting minimal necessary data. This extraction principle reduces privacy exposure while maintaining verification reliability by focusing only on the critical attribute needed for service provision.
Solution Approach 2:
The patent applies partial action by transmitting only the portion of information strictly necessary for verification (adult status) rather than complete information. This partial transmission approach prevents excessive information sharing while ensuring sufficient verification capability.
Data Source
AI summary
A user agent stores a private key and a public key of a user, and user information (registered user information). The user agent receives from a user terminal a service document including identification information of a service provider server and a user information classification requested by the service provider server, and adds a signature to the service document by using the private key of the user. The user terminal receives the signed service document and transmits the signed service document to the service provider server. The user agent receives the signed service document from the service provider server, and verifies the signature and transmits back to the service provider server the user information of the user corresponding to the included user information classification.