Access Rights Analysis Using Setting and Usage History Gaps

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing access control systems grant excessive access rights to resources that are not actually used by users, leading to potential security vulnerabilities.

Innovation Solution

An information processing apparatus that acquires setting data and access history data for each resource, identifying and outputting differences to recommend minimizing access rights, thereby supporting the deletion of unnecessary access rights.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If access rights are set to maximum resources to ensure overall function capability, then system reliability is improved, but security vulnerability increases due to excessive access rights being granted to unused resources

Engineering Contradiction:

Improvesystem reliabilityVSAvoidsecurity vulnerability

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary analysis by acquiring setting data and access history data before making access right adjustments. The analysis unit compares these datasets in advance to identify unused access rights, allowing the system to proactively minimize access rights before security vulnerabilities can be exploited, thus resolving the contradiction between maintaining reliability and reducing security risks

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system establishes a feedback loop where access history data is continuously collected and fed back to the analysis unit. This feedback mechanism allows the system to dynamically adjust access rights based on actual usage patterns, ensuring that access rights are minimized to only what is necessary while maintaining system reliability through continuous monitoring and adjustment

Inventive Principle:

Principle #23Feedback

2Object-affected harmful factors

If access rights are minimized to enhance security, then security vulnerability is reduced, but system functionality may be compromised if necessary access rights are removed

Engineering Contradiction:

Improvesecurity vulnerabilityVSAvoidsystem functionality

Core Design Contradiction:

Object-affected harmful factorsVSReliability

Solution Approach 1:

Before minimizing access rights, the system performs preliminary analysis by comparing setting data with access history data to identify which access rights are actually unused. This preliminary action ensures that only truly unnecessary access rights are removed, preventing any compromise to system functionality while still enhancing security through minimization of access rights

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system uses its own access history data to automatically identify and flag unused access rights for minimization. This self-service approach allows the system to autonomously determine which access rights can be safely removed without affecting functionality, as the system's own usage patterns provide the most accurate basis for such decisions

Inventive Principle:

Principle #25Self-service

Data Source

PatentEP4675480A1Information processing device, information output method, and information output program

Publication Date: 2026.01.07 YOKOGAWA ELECTRIC CORP

Figure 1
Figure 2
Figure 3

AI summary

An information processing apparatus 10 includes a first acquisition unit 16 that acquires, for each resource in a predetermined system, setting data in which an access right to the resource has been set, a second acquisition unit 18 that acquires history data of an access performed on the resource, and an output unit 19 that outputs information on the resource corresponding to a difference between the setting data and the history data.