User-Device Data Management for Privacy-Controlled Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Server-side platforms for user data management compromise consumer privacy and increase operational costs and regulatory burdens for businesses, as users lose control over their data and businesses become custodians of sensitive information.
Innovation Solution
Implementing a user-device based authentication and data management system where user credentials and interaction data are stored on the user's device, allowing users to control what personal information is shared with online platforms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If a server-side platform is used for user data management, then businesses can track user interactions and make informed decisions, but consumer privacy is compromised and operational costs increase
Solution Approach 1:
The patent extracts the harmful element (centralized user data storage) from the system by moving data custody from server-side to client-side. Users maintain control of their own data locally on their devices, while businesses can still access interaction information through a decentralized protocol without becoming custodians of personal data, thus resolving the contradiction between tracking capability and privacy protection
Solution Approach 2:
The patent introduces a decentralized identification protocol as an intermediary layer between users and businesses. This mediator enables interaction tracking and informed decision-making for businesses while preventing direct access to personal data, thus protecting consumer privacy. The intermediary translates user actions into verifiable credentials that businesses can process without exposing sensitive information
2Reliability
If a server-side platform is used for user data management, then businesses can authenticate consumers and manage consumer data, but regulatory overhead and liability increase
Solution Approach 1:
The patent implements self-service authentication where users independently manage their own credentials and data through client-side storage and control mechanisms. The decentralized identification protocol enables users to authenticate themselves without requiring a central authority to verify or manage their data, thus maintaining authentication reliability while eliminating the regulatory burden of data custodianship
Solution Approach 2:
The patent segments the authentication system into independent client-side components rather than a centralized server. Each user's authentication data is stored and managed separately on their own device, eliminating the need for a single point of control that would be subject to regulatory overhead. This segmentation maintains security and reliability while distributing responsibility
3Object-affected harmful factors
If user data is stored on user devices, then user privacy is enhanced and regulatory burdens are reduced, but businesses lose direct access to interaction history
Solution Approach 1:
The patent implements a feedback mechanism where user interactions are verified and recorded through the decentralized identification protocol. Businesses receive feedback in the form of verifiable credentials and interaction proofs that confirm user actions without requiring direct access to the underlying personal data. This feedback loop maintains the ability to make informed decisions while preserving user privacy
Data Source
AI summary
The present disclosure generally relates to systems and methods for user authentication and data management. Information involving a user's interactions with an online platform is stored on a user device that is used to access the platform. Such information may include user authentication information, personal information, and an interaction history of events, such as logins, purchases, and checkouts. When providing information to the online platform, the user is given the option of what information to provide and, in some cases, the user may opt to provide tokenized information in lieu of sensitive information that the user would prefer not to share. Also, the user may selectively provide information about his or her interaction history, thereby permitting the online platform to establish a trust level of the user using information from the user device. Thus, information about the user's account with the online platform is safely stored on the user device permitting the user to be the custodian of such data, including deciding what information to share with online platforms.