Access Control Module Dynamic Ownership Adjustment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computer security mechanisms, such as file system access control, face challenges in dynamically adjusting ownership control and access permissions based on user authentication and security events, leaving systems vulnerable to attacks like SQL injection and code injection.
Innovation Solution
An access control technology that automatically changes and restores ownership control and access permissions of file system objects based on user login/logout events and security events, using an access control module to store and manage ownership control information, thereby enhancing security by restricting access to more secure accounts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If ownership control and access permissions are dynamically adjusted based on user authentication events, then security is enhanced by restricting access during unattended periods, but system complexity increases due to the need for event detection and automatic modification mechanisms
Solution Approach 1:
The system performs preliminary actions by detecting authentication events (login/logout) and proactively changing ownership control and access permissions before security vulnerabilities can be exploited. The access control module pre-establishes secure states by restricting access when users are unattended, preventing potential attacks rather than responding to them after occurrence.
Solution Approach 2:
The system implements self-service by automatically detecting security events and modifying file system permissions without requiring manual administrator intervention. The access control module autonomously monitors authentication events and adjusts ownership control based on user presence, enabling the system to manage its own security state dynamically.
2Reliability
If access permissions are automatically changed based on security events, then security vulnerabilities are reduced by requiring normal authentication processes, but ease of operation decreases due to automatic permission modifications
Solution Approach 1:
The system applies dynamics by making access permissions flexible and adaptive rather than static. Ownership control and access rights automatically adjust based on real-time user authentication events and security conditions. This dynamic approach allows the system to balance security requirements with operational needs by granting appropriate access levels contextually.
Solution Approach 2:
The system changes parameters by modifying ownership control attributes and access permission levels in response to detected security events. When users log out or become unattended, the system changes the ownership parameter to a more secure state and adjusts permission levels accordingly, thereby enhancing security without requiring permanent restrictive configurations.
3Reliability
If ownership control information is stored and managed automatically, then security is enhanced by restoring permissions after user login, but device complexity increases due to information storage and management requirements
Solution Approach 1:
The access control module serves as an intermediary between authentication events and file system permission management. It intercepts login/logout events, manages ownership control information storage, and mediates permission changes automatically. This intermediary layer simplifies the overall system architecture by centralizing security logic and information management in a dedicated component.
Data Source
AI summary
An access control technology is described. Ownership control information is stored for an object in a computing system. Access control to objects in the computing system is based in part on accounts having ownership control of objects in the computing system. A first account with ownership control of the object is identified. Ownership control of the object is changed to a second account upon detection of a first security event. Ownership control of the object is restored to the first account upon detection of a second security event using the stored ownership control information.