Verification Platform Encryption Key Discarding for Data Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current online registration methods for services cannot determine whether consent for processing personal data of children has been granted by their legal guardians, violating data protection regulations and exposing data to fraud risks.

Innovation Solution

A verification platform method that encrypts sensitive user information and discards the encryption key, sending an authorisation request to a supervisor device, allowing only the supervisor to grant access to the data, ensuring compliance with regulations and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If the verification platform stores sensitive user information and encryption keys to enable data access, then data processing capability is improved, but data security and regulatory compliance deteriorate

Engineering Contradiction:

Improvedata processing capabilityVSAvoiddata security and compliance

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The system performs encryption of sensitive user information before storing it, and discards the encryption keys afterward. This preliminary encryption action ensures that when the data is stored, it is already protected, allowing the system to maintain data processing capability through encrypted storage while ensuring security compliance by eliminating access keys.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The encryption keys are extracted and removed from the verification platform after the encryption process. By taking out the keys that would enable data access, the system maintains the ability to process encrypted data while preventing unauthorized access, thus resolving the contradiction between data processing capability and data security.

Inventive Principle:

Principle #2Taking out (Extraction)

2Reliability

If the verification platform discards encryption keys to maintain security, then data security is improved, but data access capability deteriorates

Engineering Contradiction:

Improvedata securityVSAvoiddata access capability

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

Encrypted data serves as an intermediary form that bridges security requirements and data access needs. The verification platform stores and processes encrypted user information, maintaining security by discarding keys, while still enabling data access through cryptographic operations on the encrypted data when authorized by supervisors.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Productivity

If the system stores personal data to enable processing, then data processing is improved, but fraud risk and compliance violations increase

Engineering Contradiction:

Improvedata processingVSAvoidfraud risk

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary encryption of personal data before storage and discards encryption keys, creating a state where data can be processed in encrypted form without the risk of unauthorized access. This preliminary protective action eliminates fraud risk while maintaining data processing capability through encrypted operations.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The encryption process, which initially seems to complicate data access, actually converts the potential harm of data storage into a benefit by ensuring that stored data cannot be accessed fraudulently. The encrypted state protects against fraud while still allowing legitimate processing through cryptographic operations.

Inventive Principle:

Principle #22Blessing in disguise (Convert harm into benefit)

4Reliability

If the system implements encryption and key discarding to ensure compliance, then regulatory compliance is improved, but system complexity increases

Engineering Contradiction:

Improveregulatory complianceVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system extracts and removes encryption keys from the verification platform after use, simplifying the system state by eliminating sensitive elements. This extraction approach ensures regulatory compliance by preventing unauthorized access while managing complexity through systematic removal of cryptographic materials after their purpose is fulfilled.

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS11962684B2System and method for registering a user

Publication Date: 2024.04.16 EPIC GAMES INC

AI summary

According to an aspect of the present disclosure, a method performed by a verification platform for authorising a user incapable of providing digital consent comprises: receiving sensitive user information and a unique supervisor identifier; encrypting the sensitive user information using an encryption scheme with an associated encryption key to generate encrypted user information; sending an authorisation request message to a supervisor device associated with the unique supervisor identifier, wherein the authorisation request message comprises the encryption key and a request for authorisation in response; discarding the sensitive user information and the encryption key, such that the verification platform cannot access the sensitive user information; and, if the verification platform receives an authorisation response message from the supervisor device comprising a received encryption key, decrypting the encrypted user information using the received encryption key, such that the verification platform can successfully access the sensitive user information.