A method and system for tracking sensitive operations of an agent facing a permission boundary

By annotating task-based operation events with boundary context and generating identity delegation chain summaries in the permission boundary governance, the problem of tracking chain-like sensitive results across permission boundaries is solved. This enables verifiable necessity judgment and reliable tracking, reduces false positives and false negatives, and improves the stability and consistency of results.

CN121997321BActive Publication Date: 2026-06-09CHENGDU IND VOCATIONAL TECHN COLLEGE
View PDF 2 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
CHENGDU IND VOCATIONAL TECHN COLLEGE
Filing Date
2026-04-09
Publication Date
2026-06-09

AI Technical Summary

Technical Problem

In permission boundary governance, existing technologies struggle to be compatible with multiple systems, multiple identities, and asynchronous links without recording sensitive content, and to achieve verifiable necessity judgment and reliable tracing and attribution of chained sensitive results across permission boundaries. This is especially true in edge computing scenarios, where there are issues such as mismatched links and false alarms or missed alarms.

Method used

By annotating the boundary context of the operation events within the task, an identity delegation chain summary is generated, a true boundary crossing set is constructed and the minimum boundary crossing set is solved, and a causal slice evidence package is output, realizing traceable association and verifiable necessity judgment across systems and identities.

Benefits of technology

It enables verifiable necessity judgment and reliable tracking of chained sensitive results across permission boundaries in an edge computing environment, reduces reliance on manual splicing, improves the stability and consistency of results, and reduces false positives and false negatives.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN121997321B_ABST
    Figure CN121997321B_ABST
Patent Text Reader

Abstract

The application discloses a kind of agent sensitive operation tracking methods and systems for permission boundary, specifically related to computer security and access control audit field, including obtaining multiple operation events generated by agent in a task execution process as input, and extracting event identification, subject identity information, accessed object information, operation type information and occurrence timing information for each operation event, output event sequence, wherein the acquisition and extraction are completed by edge computing node nearby, by boundary context labeling to operation event in task and generating identity delegation chain digest based on token backtracking, the traceable association of cross-system cross-identity is realized;Further construct real boundary crossing set and solve the minimum boundary crossing set and carry out differential evidence, output cause-effect slice evidence package.
Need to check novelty before this filing date? Find Prior Art

Citation Information

Patent Citations

  • Dynamic authority management system and method based on multi-source salary data integration

    CN120541825A

  • Security sharing systems and methods

    US12050706B1