Access Authority Generation via Precedence Constraint Resolution

The patent segments the authority generation process into distinct phases: first generating authorities with precedence constraints using inclusion relations, then separately resolving conflicts through a priority-based selection mechanism. This segmentation allows efficient bulk generation while maintaining consistency through the conflict resolution phase, where competing authorities are systematically evaluated and resolved based on predefined priority rules.

The patent applies preliminary action by pre-defining priority relationships between different authorities before the actual access control decisions are made. The precedence constraints are established in advance during authority generation, creating a hierarchical structure that automatically resolves conflicts without requiring complex real-time analysis. This preliminary structuring simplifies the runtime decision-making process while maintaining high accuracy.

The patent implements a nested structure where authorities at different granularities are organized hierarchically. Coarse-grained authorities cover broader access patterns, while fine-grained authorities provide specific permissions. The inclusion relations allow higher-level authorities to encompass lower-level ones, creating a nested hierarchy that reduces redundancy. This nesting enables precise access control without linearly increasing the total number of authorities, as higher-level authorities can substitute for multiple lower-level ones in many cases.