Authorization Record Set Time Validity Attribute
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authority revocation methods in database systems are inefficient, particularly when revoking authorities in batches, as they require updating each record individually, leading to low processing efficiency and increased labor and time costs, especially when records are stored in different libraries or tables.
Innovation Solution
Implementing a time validity attribute for authorization records, allowing all records in a set to be updated simultaneously by setting a specific time point, thereby revoking authorities in batches without affecting existing attribute meanings and simplifying the revocation process across different storage locations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If individual record update operations are used to revoke authority, then each record can be precisely controlled, but processing efficiency deteriorates and labor costs increase when revoking in batches
Solution Approach 1:
The patent merges multiple individual record update operations into a single batch operation by introducing a set-level time validity attribute. Instead of updating each authorization record individually, the system updates the time validity attribute at the set level, which automatically triggers invalidation of all records in the set that meet the time condition, thereby combining n operations into one.
Solution Approach 2:
The patent performs preliminary action by pre-configuring the time validity attribute for authorization record sets and establishing the validation logic in advance. When revocation is needed, the system only needs to set the time validity attribute value, and the pre-established logic automatically handles the invalidation of qualifying records, eliminating the need for complex real-time processing logic.
2Productivity
If individual record update operations are performed in database environment, then precise control over each record is achieved, but actual processing efficiency becomes relatively low
Solution Approach 1:
The patent combines multiple sequential database update operations into a single batch operation. By updating the time validity attribute at the set level once, the system simultaneously invalidates all authorization records in the set that have validation moments before the set's time validity attribute value, reducing database operations from n individual updates to 1 collective update.
Solution Approach 2:
The patent changes the parameter level at which operations are performed, shifting from record-level parameter updates to set-level parameter updates. By modifying the time validity attribute at the set level rather than individual record levels, the system achieves O(1) time complexity for batch revocation instead of O(n), significantly improving processing speed and reducing time loss.
3Adaptability or versatility
If different authorization records are stored in different libraries or tables, then data organization flexibility is improved, but technology implementation difficulty increases due to library separation or table separation
Solution Approach 1:
The patent creates a universal time validity attribute mechanism that works across different libraries or tables. The set-level time validity attribute can reference authorization records stored in various locations, and the validation logic uniformly handles records regardless of their storage location, making the system multi-functional and adaptable to different data organization schemes without increasing implementation difficulty.
Data Source
AI summary
An authorizing party determines an authorization record set that needs to be revoked, where an authorization record included in the authorization record set corresponds to a token that is issued to an authorized party after the authorizing party grants access to the authorized party, and where each authorization record includes an authorization validation moment for a corresponding token. A time validity attribute of the authorization record set is configured. For a specific point-in-time, a value associated with the time validity attribute is set. A determination is performed as to whether the authorization record is revoked based on the authorization validation moment and the value associated with the time validity attribute.