Access Control Analysis Apparatus for Policy Decision Accuracy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems face challenges in accurately determining access control actions due to limitations in policy expression and decision-making processes.
Innovation Solution
An analysis apparatus and method that acquire a dataset of access attribute patterns and associated control actions, and estimate the order and magnitude of the degree of influence of a second pattern on the access control action using the acquired dataset.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If access control policies are defined with limited policy expression capability, then the system is easier to manage and operate, but the accuracy of access control action decisions is insufficient
Solution Approach 1:
The patent segments the access control decision-making process into multiple independent components: policy rules, historical access data, pattern recognition models, and influence degree calculations. This allows the system to maintain simple policy expressions while achieving accurate decisions through comprehensive analysis of multiple segmented factors.
Solution Approach 2:
The patent introduces an intermediary analysis apparatus that mediates between the simple policy expression and the complex decision-making requirements. This intermediary component analyzes historical data, recognizes patterns, and calculates influence degrees to bridge the gap between simple policies and accurate decisions.
2Measurement precision
If comprehensive access control data and complex analysis methods are used, then the accuracy of access control action decisions is improved, but the system complexity increases
Solution Approach 1:
The analysis apparatus performs self-service by automatically acquiring historical access data, recognizing patterns, and calculating influence degrees without requiring complex manual configuration. The system serves itself by autonomously analyzing data and generating decision recommendations, reducing the perceived complexity for users.
Solution Approach 2:
The patent transforms complex qualitative decision-making into quantitative parameter analysis by calculating specific influence degrees for different access attributes. This parameterization approach simplifies the system architecture by converting complex judgments into measurable parameters that can be systematically processed.
3Device complexity
If the influence degree of access attributes is not quantified, then the policy expression remains simple, but the ability to accurately decide access control actions is limited
Solution Approach 1:
The patent replaces subjective mechanical judgment with automated computational analysis. Instead of relying on manual assessment of attribute influence, the system uses automated data analysis and pattern recognition to objectively calculate influence degrees, thereby improving reliability while maintaining policy expression simplicity.
Solution Approach 2:
The system implements feedback mechanisms by analyzing historical access data and using the results to refine pattern recognition and influence degree calculations. This feedback loop continuously improves decision reliability while keeping the policy expression structure simple and manageable.
Data Source
AI summary
An analysis apparatus according to an example embodiment of the present disclosure includes at least one memory configured to store instructions; and at least one processor configured to execute the instructions to acquire a data set in which a plurality of combinations of a first pattern of one or more elements indicating an access attribute and an access control action associated with the first pattern are defined, and a second pattern of one or more elements indicating an access attribute, and estimate at least one of an order or magnitude of the degree of influence of the second pattern influencing the action by using the data set and the second pattern.