Web Service Secure Data Transmission

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for secure data transmission, particularly for sensitive information like tax return data, face challenges in delivering executable software applications due to email filtering and size limitations, and require robust security measures to ensure only intended recipients can access encrypted data.

Innovation Solution

A web service manager verifies authorized messages, generates data package identifiers, and uses a notification system to facilitate secure transfer of encrypted data packages between computing systems, allowing for optional decryption and editing via stub applications, while avoiding direct email transmission of executables and ensuring secure access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If executable software applications are transmitted via email, then the user can receive and use the software, but email systems filter out or block the executable files for virus protection and size limitations

Engineering Contradiction:
Improvesuccessful delivery of executable softwareVSAvoidemail filtering and blocking
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a web service as an intermediary between the sender and receiver. The executable software is uploaded to the web service, which then provides a download link to the recipient. This intermediary approach bypasses email filtering systems while ensuring secure and reliable software distribution.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent extracts the executable software from the email transmission process entirely. Instead of embedding the executable in an email message, the system separates the software delivery mechanism from email communication, allowing the executable to be stored and accessed through a web service interface.

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If sensitive data is encrypted for secure transmission, then unauthorized access is prevented, but the recipient requires decryption keys or passwords to access the data

Engineering Contradiction:
Improvesecurity of data transmissionVSAvoidaccess to encrypted data
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent implements preliminary action by pre-configuring the web service with authentication mechanisms and decryption capabilities. The recipient's identity and access rights are established in advance, so when they download the data, the system automatically provides the necessary decryption keys or authentication, eliminating manual key exchange steps.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If a web service is used to transmit data packages, then email filtering issues are avoided, but the system requires verification mechanisms to ensure authorized access

Engineering Contradiction:
Improvesuccessful data transmissionVSAvoidverification and authentication system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The web service is designed with multi-functionality, combining data storage, authentication, encryption, and file delivery capabilities in a single system. This universal approach consolidates multiple security and transmission functions into one platform, reducing the need for separate verification systems while maintaining comprehensive security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS7634651B1Secure data transmission web service
Publication Date: 2009.12.15 INTUIT INC
  • US7634651B1 patent drawing
  • US7634651B1 patent drawing
  • US7634651B1 patent drawing

AI summary

A web service includes a web service manager for servicing an originating message received from an originating client application, wherein the originating message has verification information a data package having an encrypted portion. The web service manager verifies that the originating message originated from an authorized originating client application, using the verification information. An identifier generator creates a data package identifier associated with the data package and a location within a data package store used for storing the data package. A message generator generates a notification message which is sent to a receiving computing system. Upon receipt of at least a portion of the notification message from the receiving computing system, the web service manager retrieves the data package from the data package store and initiates transfer the data package to the receiving computing system.