Authority Changing Device Using Geometrical Area Logic
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing Role-Based Access Control (RBAC) systems, as defined in IEC 62351-8, do not consider geometrical relations between targets, leading to inefficiencies in access authority changes and potential inconsistencies when managing access rights.
Innovation Solution
An authority changing device that defines access authority by a combination of 'role', 'right', and 'area' using logical expressions and tables to determine the feasibility of access changes, reducing data size and ensuring efficient access control by introducing a geometrical relation between targets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If traditional RBAC systems are used without geometrical relations, then the system structure is simple, but access authority changes become inefficient and may cause inconsistencies
Solution Approach 1:
The patent introduces a third dimension (geometrical relation/area) to the traditional two-dimensional RBAC model (role and right). By defining access authority as a combination of role, right, and area, the system can efficiently manage access changes for multiple targets simultaneously while maintaining consistency through the geometrical relationship between areas.
2Reliability
If access authority is defined only by role and right, then data size is small, but access control consistency across multiple targets cannot be ensured
Solution Approach 1:
By adding the area dimension to the role-right combination, the system can define access authority for geometrical regions. This allows a single authority definition to cover multiple targets within the same area, ensuring consistency without proportionally increasing data size for each individual target.
Solution Approach 2:
The area concept serves multiple functions: it defines the scope of access, establishes geometrical relationships between targets, and enables batch authority management. A single area-based authority definition can simultaneously control access to multiple database tables or files that fall within that geometrical region.
3Ease of operation
If geometrical relations are introduced between targets, then access authority changes become more efficient, but system complexity increases
Solution Approach 1:
The patent adds the area dimension to traditional RBAC, enabling access authority to be defined in terms of geometrical regions. This allows operators to manage access rights for multiple related targets simultaneously by specifying an area, significantly improving ease of operation while the added complexity is confined to the data model rather than system architecture.
Data Source
AI summary
According to an embodiment, an authority changing device includes a first determiner, a second determiner, and a changing unit. A first authority is defined by a first combination of first to third item values, and a second authority is defined by a second combination of the fourth to sixth item values. The first determiner uses a logical expression to determine whether the change from the first authority to the second authority is possible, not possible, or unknown. The second determiner uses a first table to determine the availability of change from the first authority to the second authority when the availability of the change is determined to be unknown. The changing unit changes the first authority to the second authority when the change is determined to be possible.