Stateful Context-Based Decentralized Decision Platform Authorization System

Abstract

A state-based distributed decision-making platform authorization system is disclosed. The distributed decision-making platform authorization server is connected to multiple distributed decision-making platforms, user devices, and external policy servers. One or more processors of the distributed decision-making platform authorization server are coupled to memory, loading and executing multiple computer-readable instructions. This enables the distributed decision-making platform authorization server to achieve processing mechanisms such as real-time state context acquisition, real-time authorization calculation based on multi-layered policy information, dynamic authorization decision generation, platform-specific dynamic authorization information conversion, and decision execution permission control. This allows the distributed decision-making platform authorization server to generate corresponding authorization results in real time based on the context information of the decision request. This achieves the technical effect of dynamically updating authorization decisions and decision execution permissions based on real-time state context and multi-layered policy information, improving the consistency, timeliness, reliability, and collaborative operation capabilities of the distributed decision-making platform authorization control.

Claims

1. A distributed decision platform authorization system with state context, applicable to a distributed decision platform authorization server for authorizing and managing multiple distributed decision platforms, the distributed decision platform authorization server further comprising: a memory storing multiple computer-readable instructions; and one or more processors coupled to the memory, loading and executing the multiple computer-readable instructions, causing the distributed decision platform authorization server to perform the following steps: obtaining a real-time state context related to a decision request and / or one of the multiple distributed decision platforms; obtaining or accessing at least one layer of policy information, and performing real-time authorization calculations on the real-time state context and the at least one layer of policy information to generate a dynamic authorization decision; generating dynamic authorization information corresponding to one of the multiple distributed decision platforms based on the dynamic authorization decision; and controlling the decision execution permission of the corresponding one of the multiple distributed decision platforms based on the dynamic authorization information.

2. The distributed decision-making platform authorization system with state context as described in claim 1, wherein the real-time state context includes user identity information, device status information, location information, time information, system load information, task status information, risk event information, or a combination thereof.

3. The distributed decision-making platform authorization system with state and context as described in claim 1, wherein the at least one layer of policy information includes role-based policies, attribute-based policies, context-based policies, risk control policies, platform-level policies, or combinations thereof.

4. The distributed decision platform authorization system with state context as described in claim 1, wherein the distributed decision platform authorization server re-forms the dynamic authorization decision and regenerates the dynamic authorization information when it detects a change in the real-time state context.

5. The distributed decision-making platform authorization system with state context as described in claim 1, wherein the decision execution permissions include data access permissions, model calling permissions, tool calling permissions, workflow triggering permissions, decision output permissions, or combinations thereof.

Images