User Agent Pseudonymous Identity Control for Privacy-Preserving Registration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In scenarios where different service providers share a contractor, there is a risk of name identification and unauthorized access to user information, compromising privacy, as contractors can integrate user information across multiple providers.
Innovation Solution
A user information management system that includes a user terminal, user agent, and service provider server, utilizing pseudo user identification and cryptographic signatures to control access rights and distribute user information selectively, preventing name identification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If user information is shared with service providers and contractors, then service quality and functionality are improved, but privacy protection deteriorates due to name identification risks
Solution Approach 1:
The patent segments user information into multiple types (identification information, attribute information, action history) and controls access to each type separately. Different contractors receive only the specific information types they need for their designated services, preventing comprehensive name identification while maintaining service functionality.
Solution Approach 2:
The patent introduces a user information management system that acts as an intermediary between users, service providers, and contractors. This intermediary controls and regulates information flow, allowing service delivery while preventing unauthorized name identification by contractors through centralized access management.
2Productivity
If contractors access user information from multiple service providers, then business efficiency is improved through information integration, but unauthorized access and privacy violations worsen
Solution Approach 1:
The patent implements preliminary action by obtaining user consent and defining information access rights before any information is shared with contractors. The system pre-establishes access control rules and user permissions, ensuring that even when contractors access information from multiple service providers, they do so within authorized boundaries that prevent unauthorized access.
3Adaptability or versatility
If comprehensive user information is distributed to service providers, then service personalization is improved, but information security worsens due to increased exposure
Solution Approach 1:
The patent applies local quality by providing different levels and types of information access to different service providers based on their specific service requirements. Each service provider receives only the information locally relevant to their service function, enabling service personalization while minimizing overall information exposure and enhancing information security.
Data Source
AI summary
A user agent stores user information of a user and user information provided to a service provider server. When a user terminal registers the user in the service provider server, the user agent sends the user information already provided to the service provider server to the user terminal. When the user agent receives a provision permission of the user information from the user terminal, the user agent generates pseudo user identification information, a public key, and a private key, signs a service document of the service provider server, and sends the service document to the service provider server via the user terminal. When the signed service document is received, the user agent verifies the signature and sends user information to the service provider server.