Selective User Data Sharing Schemas for Secure Third-Party Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data management systems face challenges in securely sharing sensitive information with third-party systems, as they often transmit more data than necessary, exposing clients to risks and discomfort due to the lack of control over data sharing.
Innovation Solution
A trusted data management system (TDMS) allows users to define data sharing schemas that specify subsets of user data and formats for transmission to third-party systems, ensuring only the minimum required information is shared, thereby enhancing security and reducing transmission burdens.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional data management systems transmit user data to third party systems, then the third party system can access the required information, but more data than necessary is transmitted exposing clients to security risks
Solution Approach 1:
The patent extracts only the specific data elements required by the third party system from the complete user data set. The system identifies and transmits only the minimum necessary information (e.g., specific fields like age, location, or product preference) while leaving sensitive data (e.g., social security number, full address, financial information) in the user's secure storage, thereby reducing data exposure while maintaining functionality
Solution Approach 2:
The patent segments user data into distinct data elements that can be individually controlled for sharing. Each data element can be independently authorized, formatted, and transmitted based on the third party's specific needs. This segmentation allows precise control over what information is shared, enabling the system to transmit only necessary segments while protecting other segments from exposure
2Ease of operation
If conventional data management systems store information within a single application, then the application has full access to all user data, but clients are uncomfortable with the risk and lack of control over data sharing
Solution Approach 1:
The patent introduces a trusted data management system as an intermediary layer between the user's data storage and third party systems. This intermediary manages data sharing by requiring user authorization, controlling what data is transmitted, and ensuring proper formatting. Users gain control through the ability to approve or deny data sharing requests and specify which data elements can be shared, while the intermediary maintains security by never exposing the complete data set to third parties
Solution Approach 2:
The patent implements preliminary user authorization and data element selection before any data transmission occurs. The system prepares and formats only the authorized data elements for transmission, ensuring that users have already controlled what information can be shared. This preliminary control mechanism prevents unauthorized or excessive data exposure while maintaining ease of operation through user-friendly authorization interfaces
3Productivity
If conventional data management systems provide sensitive information to third parties, then the interaction can proceed, but clients face risks beyond what is required for the interaction
Solution Approach 1:
The patent extracts and transmits only the specific data elements necessary for the third party interaction to proceed successfully. For example, if a third party needs to verify user age for a purchase, only the age field is transmitted, not the user's complete personal information. This extraction approach maintains interaction efficiency while eliminating the risk associated with transmitting unnecessary sensitive data
Solution Approach 2:
The patent applies different data sharing configurations to different third party systems and interaction types. Each third party receives only the data elements locally appropriate for their specific function, rather than a universal data set. This local quality approach ensures that data transmission is optimized for each interaction's specific needs while minimizing client risk by limiting exposure to only what is locally required
Data Source
AI summary
A trusted data management system (TDMS) receives, from a third party system, a request for user data and a user identifier. The TDMS identifies a data sharing schema from a set of data sharing schemas associated with the user identifier. The data sharing schema defines a subset of data values of the user data. The data sharing schema also defines, for each data value of the subset of data values of the subset of the user data, a format for transmitting the data value. The TDMS retrieves, from a data storage unit, the subset of data values of the user data. The TDMS formats each data value of the subset of data values in accordance with the respective defined format of the data value. The TDMS transmits, to the third party system, the subset of user data in accordance with the data sharing schema.


