Automated Access Control via HR Data Synchronization

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Traditional methods for managing access control in network computing rely on manual updates of employee data and permissions, leading to inefficiencies and increased risk of human error, which can result in unauthorized access or incorrect permissions, compromising the security and integrity of protected resources.

Innovation Solution

A computing system and method that automatically updates user permissions based on real-time or periodic employee data from human resources databases, using employee hierarchies and authorization policies to manage access privileges and request approvals as needed, ensuring that only authorized individuals can access protected resources.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual update of employee data and permissions is used, then device complexity is reduced, but reliability deteriorates due to increased risk of human error and information lags

Engineering Contradiction:

Improveaccess control reliabilityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The access control system automatically retrieves employee data from HR databases and updates permissions without manual intervention. The system serves itself by autonomously synchronizing access control information with HR system changes, eliminating the need for manual updates while maintaining high reliability.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces manual mechanical updating processes with automated electronic data retrieval and processing. The system uses computer-based automation to fetch employee data from HR databases and apply permission changes, substituting human manual operations with automated mechanical/electronic processes.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If manual updating of access privilege data is performed, then ease of operation is improved, but productivity deteriorates due to information lags and inefficiencies

Engineering Contradiction:

Improveaccess management efficiencyVSAvoidoperation simplicity

Core Design Contradiction:

ProductivityVSEase of operation

Solution Approach 1:

The system continuously or periodically automatically synchronizes access control data with HR database changes. This continuous automated operation eliminates information lags and ensures real-time accuracy of permissions, significantly improving productivity compared to periodic manual updates.

Inventive Principle:

Principle #20Continuity of useful action

Solution Approach 2:

The access control system implements feedback mechanisms by automatically detecting changes in employee data from HR databases and responding by updating permissions accordingly. This closed-loop feedback system ensures that access privileges are continuously aligned with current employee information without manual intervention.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS11157643B2Systems and methods for delegating access to a protected resource

Publication Date: 2021.10.26 THE TORONTO DOMINION BANK

AI summary

A method for authorizing execution of a first action is disclosed. The method includes: receiving, from a first client server having access to a human resources database of an organization, a first employee structure indicating an employee status associated with each of one or more employees of the organization; receiving, from a requesting device, a first request to execute a first action; generating a second request to obtain approvals for executing the first action; and selectively transmitting the second request to one or more first employees of the organization, the one or more first employees being identified based on the first employee structure.