Access Policy Display Matrix for Visibility
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access policy display methods, such as if-then formats and decision trees, face challenges in maintaining visibility when dealing with multiple attributes, leading to increased text lines or image size, which hinders user understanding.
Innovation Solution
An access policy display device and method that generates a two-dimensional image with distinct image regions for attribute combinations, calculating and displaying the degree of access permission or denial, allowing for improved visibility by using color or pattern differentiation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If access policy is displayed in if-then format to help users understand the policy, then the policy information is made more accessible, but the number of text lines increases and visibility decreases
Solution Approach 1:
The patent segments the access policy into a two-dimensional matrix structure where rows represent one attribute and columns represent another attribute. This segmentation organizes the policy information into discrete, visible cells that can be easily perceived, reducing the perceived length while maintaining comprehensive information coverage.
Solution Approach 2:
The patent transforms the traditional one-dimensional text-based if-then format into a two-dimensional visual matrix. By adding a spatial dimension to the policy representation, the information is distributed across a grid structure that improves visibility and reduces the linear length of text while maintaining all necessary policy details.
2Ease of operation
If decision tree is displayed to make it easier for users to understand the access policy, then the policy structure is visualized, but the image size increases and visibility decreases
Solution Approach 1:
The patent divides the access policy into a segmented two-dimensional matrix where each cell represents a specific combination of attribute values. This segmentation allows the policy to be displayed in a compact grid format that is easier to understand while occupying less space than traditional decision tree visualizations.
Solution Approach 2:
The patent changes the representation parameters from hierarchical decision tree structures to a flat two-dimensional matrix format. This parameter transformation consolidates information into a more space-efficient layout that maintains visual clarity and improves visibility while preserving the decision-making logic of the access policy.
3Adaptability or versatility
If multiple attributes are used to determine access policy rights and wrongs, then the policy coverage is comprehensive, but the number of text lines increases and visibility decreases
Solution Approach 1:
The patent employs a two-dimensional matrix structure that adds a spatial dimension to accommodate multiple attributes. By organizing attribute combinations in rows and columns across a grid, the system can represent comprehensive policy coverage involving multiple attributes without increasing linear text length, as the information is distributed across the two-dimensional space.
Solution Approach 2:
The patent segments the comprehensive policy coverage into discrete matrix cells, where each cell corresponds to a specific combination of attribute values. This segmentation allows multiple attributes to be represented simultaneously in an organized manner, maintaining comprehensive policy coverage while preventing the text from becoming excessively long, as the information is structured in compact, visible units.
Data Source
AI summary
An access policy display device includes an image generation unit which sets an image region for each combination of an attribute value of one attribute and an attribute value of another attribute in two attributes selected from two or more attributes constituting a condition of an access policy, calculates the degree of access permission or access denial in a plurality of the combinations, and generates an image in which a plurality of the image regions is displayed that allows for distinguishing the degree, and a display which displays the image.