Multi-Resource Access Control With Component-Level Permission Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional systems lack an efficient and reliable method for managing complex data access permissions across multiple resources, leading to inefficiencies and potential errors in access control management.
Innovation Solution
A data-access management system utilizing an AI model, such as a large language model (LLM), to generate and manage access controls, check permissions, and provide explanations for access decisions, incorporating role-based, attribute-based, and classification-based access controls.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If manual access control management is used, then system complexity is low, but productivity and reliability deteriorate due to inefficiencies and errors
Solution Approach 1:
The system enables self-service access control management by allowing users to autonomously check their own access permissions across multiple resources. The access control system automatically queries component services, retrieves permission information, and presents results without requiring manual intervention or complex administrative processes, thereby improving productivity while maintaining manageable complexity through automation.
Solution Approach 2:
The patent replaces manual mechanical access control processes with an automated software-based system. Instead of manual permission checking and system administration, the system uses software services, automated queries, and integrated permission information retrieval mechanisms to manage access controls, significantly improving efficiency and reducing human error while maintaining system security.
2Reliability
If comprehensive access control checking is performed across multiple resources, then reliability improves, but time consumption increases
Solution Approach 1:
The system performs preliminary actions by pre-establishing access control policies, permission information, and component service configurations before actual access requests occur. Permission information is pre-processed and stored, allowing rapid retrieval and decision-making during actual access checks, thereby achieving high reliability without excessive time consumption.
Solution Approach 2:
The access control system incorporates feedback mechanisms where component services respond to permission queries with their respective access control information. The system uses these feedback responses to automatically determine overall access permissions, enabling rapid and accurate multi-resource access checking through iterative query-response cycles that optimize both reliability and speed.
Data Source
Figure 1
Figure 2A~2B
Figure 3
AI summary
In some examples, systems and methods for checking data access are provided. For example, a method includes: receiving a checking request about a user, the checking request including a user identifier of the user and a resource indication of a resource; determining one or more components referenced by the resource; for each component of the one or more components referenced by the resource, determining permission information indicating whether the user access to at least a part of the one or more components; and determining permission information indicating whether the user is permitted to access the resource.