AI Agent Workflow Access Control by Device and User Context

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems lack effective methods for dynamically managing the execution of artificial intelligence agents, particularly in managing user access and interaction based on contextual circumstances such as device status, network characteristics, and user permissions, which existing systems, which is essential for enterprises.

Innovation Solution

An AI platform that manages AI agents through a second AI agent at a client device to enforce device compliance, allowing dynamic management of AI agent execution based on management policies, including device, user, and network configurations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If enterprises use pre-built static workflows of AI agents, then implementation is simplified, but flexibility and adaptability to different user needs and contextual circumstances are lost

Engineering Contradiction:
Improveease of implementationVSAvoidflexibility of workflow
Core Design Contradiction:
Ease of manufactureVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamic workflow execution where AI agent workflows can be modified at runtime based on user trust levels and contextual circumstances. The system transitions from static pre-built workflows to dynamic workflows that adapt to device statuses, network characteristics, and user permissions, allowing enterprises to maintain implementation simplicity while gaining flexibility.

Inventive Principle:
Principle #15Dynamics

2Reliability

If enterprises implement custom AI agent workflows with dynamic access control, then user security and compliance are improved, but system complexity increases

Engineering Contradiction:
Improveuser securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a workflow engine as an intermediary component that manages dynamic access control and trust level evaluations. This intermediary handles the complexity of security policies, device status monitoring, and contextual circumstance assessments, shielding users from the underlying system complexity while maintaining enhanced security and compliance.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Productivity

If users are given broad access to AI models and datasets, then productivity and task automation are improved, but security risks and unauthorized access increase

Engineering Contradiction:
Improvetask automation capabilityVSAvoidsecurity risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent dynamically changes access parameters based on user trust levels and contextual circumstances. Instead of static permission settings, the system adjusts access rights, data visibility, and model interaction parameters in real-time based on device statuses, network characteristics, and user behavior, allowing broad access when safe and restricted access when risks are detected.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS20250378001A1Dynamic Execution of Artificial Intelligence Agents through Device Management
Publication Date: 2025.12.11 AIRIA LLC
  • US20250378001A1 patent drawing
  • US20250378001A1 patent drawing
  • US20250378001A1 patent drawing

AI summary

Systems and methods are described for dynamic execution of artificial intelligence (“AI”) agents. A server can receive, from a client device, an input associated with an AI agent. Based on a manifest file or user profile, the server can identify a management policy that applies to the AI agent. The server then dynamically configures access to the agent objects based on applying the management policy. The management policy is applied to a device status of the client device, a user profile of a user of the client device, and/or a network configuration of the client device. The server then executes a modified workflow based on the dynamically configured access, wherein the modified workflow bypasses or changes operation of at least one of the agent objects. Based on the modified workflow, the server transmits an output to the client device.