Access Right Management Device Policy Negotiation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional access right management systems face inefficiencies in negotiating and agreeing on access policies across multiple domains, particularly when dealing with large numbers of access policy units and failing to consider counterproposals or partial alterations to existing policies.
Innovation Solution
An access right management system that identifies negotiating partners for each policy unit in a resource-sharing policy, generates negotiation information, and transmits it to the appropriate devices, allowing for efficient policy negotiation and partial alterations without re-negotiating agreed-upon units.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If conventional access right management systems negotiate policies across multiple domains, then access control is achieved, but the negotiation process becomes inefficient when dealing with large numbers of policy units
Solution Approach 1:
The patent segments the policy negotiation process by identifying and separating policy units that require negotiation from those that do not. The access right management device divides the overall policy set into individual policy units, identifies which ones need negotiation with specific domain administrators, and processes them separately. This segmentation reduces the effective number of policy units requiring negotiation, thereby improving negotiation efficiency despite the large total quantity of policies.
2Reliability
If all policy units are negotiated with all domain administrators, then comprehensive agreement is achieved, but the amount of negotiation information and communication overhead increases significantly
Solution Approach 1:
The patent applies local quality by tailoring the negotiation process to each specific policy unit's requirements. Instead of uniformly negotiating all policy units with all domain administrators, the system identifies the specific domain administrator responsible for each policy unit and directs negotiation only to that relevant administrator. This localized approach ensures comprehensive agreement coverage while minimizing unnecessary communication overhead and information volume.
3Stability of the object's composition
If the entire resource-sharing policy is re-negotiated after partial alterations, then policy consistency is maintained, but the negotiation time and complexity increase unnecessarily
Solution Approach 1:
The patent extracts and isolates only the altered or added policy units from the overall resource-sharing policy for re-negotiation. When changes are made to the policy, the system identifies specifically which policy units have been modified and extracts them for targeted re-negotiation with the relevant domain administrator(s). This approach maintains policy consistency for the changed portions while avoiding unnecessary re-negotiation of unchanged policy units, thereby significantly reducing negotiation time and complexity.
Data Source
AI summary
Each domain is provided with an access right management device which creates a resource-sharing policy and performs processing for resource-sharing policy negotiation between a plurality of domain administrators. An access right management device that has created a resource-sharing policy identifies, for each policy unit included in the resource-sharing policy, an access right management device that is a negotiating partner to negotiate with about the policy unit in question. The access right management device generates negotiation information including an identification name of the identified negotiating-partner access right management device and the policy unit in question and sends the negotiation information to the negotiating-partner access right management device. Only when all policy units are agreed on by respective identified negotiating-partner access right management devices, the resource-sharing policy is set on shared resources.