Access Policy Synchronization Across Tagged Data Platforms
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Implementing access control policies across multiple data platforms in organizations is cumbersome and error-prone due to differences in platform-specific languages and commands, requiring significant technical expertise and leading to inefficient updates in response to policy changes or data changes.
Innovation Solution
A system that automatically synchronizes access control policies across multiple data platforms by associating objects with tags, generating platform-independent representations, and converting them into platform-specific instructions, ensuring consistent enforcement even with dynamic changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control policies are implemented manually across multiple data platforms using platform-specific languages and commands, then policy enforcement can be achieved, but the process becomes cumbersome and error-prone requiring significant technical expertise
Solution Approach 1:
The patent introduces a policy management system that acts as an intermediary between policy definitions and data platforms. This system translates high-level policy definitions into platform-specific instructions, eliminating the need for manual implementation across multiple platforms and reducing both errors and technical expertise requirements.
Solution Approach 2:
The system provides a universal policy management interface that can manage access control across multiple different data platforms through a single system. This multi-functional approach allows the same interface to generate instructions for various platforms without requiring separate manual configuration for each platform.
2Stability of the object's composition
If access control policies are updated manually across all data platforms in response to policy changes or data changes, then policy synchronization can be maintained, but the process is time-consuming and inefficient
Solution Approach 1:
The system performs preliminary actions by automatically detecting changes in policies or data and proactively updating access control instructions across all platforms before inconsistencies can arise. This automated change propagation eliminates the need for manual synchronization efforts.
Solution Approach 2:
The system implements feedback mechanisms that monitor policy definitions and data changes, automatically triggering updates across data platforms when changes are detected. This closed-loop approach ensures policy synchronization without manual intervention while maintaining high update efficiency.
3Manufacturing precision
If platform-specific languages and commands are used for each data platform, then precise control over each platform can be achieved, but the complexity of the system increases significantly
Solution Approach 1:
The system segments the policy management process into distinct layers: a high-level policy definition layer that is platform-agnostic, and a translation layer that generates platform-specific instructions. This segmentation allows precise platform control while maintaining low overall system complexity by isolating platform-specific details to the translation layer only.
Data Source
AI summary
A system manages access control policies for accessing data stored in a plurality of data platforms. The system receives access control policy specification describing an access control policy that controls access to a set of datasets by a set of users. The set of datasets is defined based on a condition based on the data tags representing attributes of the datasets. The system compiles the access control policy specification to generate a platform independent access control representation of the access control policy. The platform independent access control representation comprises a set of tuples. Each tuple identifies a particular set of users, a particular set of datasets, and a particular action. The system further generates data platform specific instructions for each data platform of the plurality of data platforms.