Answer Generation Access Control for Restricted File Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems restrict access to file data based on user rights, potentially limiting the generation of accurate answers to user questions, especially when the user's access rights do not allow full access to necessary file data.
Innovation Solution
An information processing system that controls the use of file data independently of user access rights to generate answers, allowing access and utilization of restricted data for answer generation and permitting presentation of answers through secondary user authorization or system control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control is strictly enforced based on user rights, then security and data protection are improved, but the ability to generate comprehensive answers is deteriorated
Solution Approach 1:
The patent segments the access control process into two distinct phases: (1) data retrieval phase where the system accesses file data regardless of user access rights, and (2) answer presentation phase where the generated answer is evaluated against access rights before presentation. This segmentation allows comprehensive data utilization while maintaining security boundaries.
Solution Approach 2:
The patent introduces an intermediary evaluation mechanism that acts as a mediator between the answer generation process and the access control system. The evaluator assesses whether the generated answer contains information that should be restricted based on user access rights, allowing nuanced control rather than simple binary access denial.
2Reliability
If user access rights restrict file data usage, then data security is maintained, but answer accuracy and completeness deteriorate
Solution Approach 1:
The patent performs preliminary data retrieval and answer generation before applying access control evaluation. The system first generates a complete answer based on all relevant file data, then subsequently evaluates and potentially modifies the answer based on access rights. This preliminary action ensures maximum answer accuracy is achieved first, then security constraints are applied.
Solution Approach 2:
The patent changes the parameter of access control from a binary restriction applied during data access to a nuanced evaluation applied during answer presentation. The system transforms the rigid access control parameter into a flexible evaluation mechanism that considers the content and sensitivity of the generated answer rather than simply blocking data access.
3Object-affected harmful factors
If strict access control is applied during file data access, then unauthorized access is prevented, but the system cannot utilize all relevant data for answer generation
Solution Approach 1:
The patent inverts the traditional access control approach by allowing data access during the generation phase and then applying control during the presentation phase. Instead of blocking access to restricted data upfront, the system allows the LLM to access and process all relevant data, then evaluates the generated answer to determine what should be presented to the user based on their access rights.
Data Source
AI summary
An information processing system includes a processor configured to: receive question data input from a user; in generation of answer data to the question data using file data to which it is preset whether or not the user has an access right, in a case where access to the file data is restricted or prohibited by the access right of the user, control the use of the file data in the generation of the answer data independently of control of the access right to generate the answer data; and present the answer data to the user.