Authorization Management System Union Logic Evaluation

The patent inverts the traditional authorization logic from requiring data to fall within the intersection of all authorization objects to allowing access if data falls within the union of granted authorizations. This inversion fundamentally changes the access control model from restrictive (intersection) to flexible (union), resolving the contradiction by improving flexibility while maintaining security through the authorization framework.

The patent introduces dynamic authorization evaluation where the system can adapt between different evaluation modes (serial and parallel) and logic types (intersection and union). This dynamic approach allows the system to switch between security-focused and flexibility-focused modes depending on the specific authorization scenario, resolving the static contradiction between security and flexibility.

The patent implements preliminary action by evaluating all authorization objects in parallel before making an access decision, rather than serially evaluating them one by one. This preliminary parallel evaluation significantly reduces processing time while maintaining comprehensive security control, as all authorization checks are performed simultaneously rather than sequentially.

The patent merges multiple authorization evaluations into a unified parallel processing framework where all authorization objects are evaluated concurrently. This merging of evaluation processes reduces the total processing time from the sum of individual evaluation times to approximately the maximum of individual evaluation times, resolving the time loss issue.

The patent inverts the authorization logic from intersection-based precision to union-based flexibility. By allowing access if data falls within any of the granted authorization objects rather than requiring it to fall within all of them, the system achieves greater flexibility and adaptability while maintaining appropriate access control precision through the structured authorization framework.

The patent changes the fundamental parameter of authorization logic from intersection to union. This parameter change transforms the access control behavior from highly precise but rigid to flexible and adaptable, allowing users to access data that matches any of their granted authorizations rather than requiring matches with all authorizations.

The patent applies segmentation by dividing the authorization system into modular authorization objects that can be independently created, configured, and evaluated. This segmentation allows unlimited authorizations to be managed through discrete, manageable units rather than as a monolithic complex structure, reducing the perceived system complexity while maintaining high adaptability.

The patent implements universality by creating a unified authorization evaluation framework that handles all authorization objects through a common process. This universal approach allows the system to manage unlimited authorizations of various types through a single multi-functional evaluation mechanism, preventing complexity from proliferating across multiple specialized systems.