Archived Data Access Control via Format Translation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Access control mechanisms are inadequate for archived data, rendering it vulnerable to unauthorized access due to the lack of direct compatibility between archived data formats and access control frameworks, compromising data security.
Innovation Solution
A system and method that transforms archived data into a format compatible with access management systems, extracts access control data, and injects it into an access management system to evaluate user rights, ensuring secure access control for archived data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Duration of action of stationary object
If archived data is stored in a separate archive format for long-term retention, then data retention capability is improved, but access control compatibility deteriorates
Solution Approach 1:
The patent introduces an intermediary component that translates between the archive format and the object format. This intermediary enables access control frameworks to evaluate archived data by converting it into a format they can understand, without requiring the archived data itself to be in the original object format. The intermediary acts as a bridge that maintains data retention in archive format while providing compatibility with access control systems.
Solution Approach 2:
The patent changes the parameter of data format representation by transforming archived data from its stored archive format into an object format that access control frameworks can process. This parameter change is temporary and reversible, allowing the system to maintain long-term storage in the efficient archive format while enabling access control evaluation through format transformation.
2Adaptability or versatility
If archived data is transformed into original object format for access control evaluation, then access control compatibility is improved, but processing complexity increases
Solution Approach 1:
The patent extracts only the necessary access control information from the archived data during the transformation process, rather than fully reconstructing the entire original object. This extraction approach reduces processing complexity by focusing only on the specific data elements needed for access control evaluation, while still achieving compatibility with access control frameworks.
Solution Approach 2:
The patent performs preliminary transformation of archived data into object format only when access control evaluation is needed, rather than maintaining continuous transformation. This on-demand preliminary action reduces overall processing complexity by transforming data only at the specific moment when access control checks are required,而非持续转换。
Data Source
AI summary
A computer-implemented method may comprise: receiving, from a software application, a first request to retrieve archived data from an archive, the first request being associated with a user of the software application; obtaining the archived data in a first format from the archive; transforming the archived data from the first format into a second format; extracting access control data from the archived data in the second format, the access control data defining one or more criteria for accessing the archived data; injecting the access control data into an access management system that is configured to control access to non-archived data; subsequent to the injecting the access control data, sending, to the access management system, a second request to evaluate access rights of the user; and based on the access management system evaluating the access rights of the user, sending the archived data in the second format to the software application.