Authorization Server Watchlist for Data Reclassification Alerts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems do not provide data-reclassification monitoring and notification services for users who have been denied access to sensitive or confidential data when it is reclassified as publicly available.
Innovation Solution
An authorization server monitors the reclassification of data restriction status and automatically notifies users who were previously denied access when the data becomes publicly available, using a watchlist to track users and transmit notifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If access control lists are updated to include new users or modify access types, then user access management is improved, but monitoring and notification services for users denied access are lacking
Solution Approach 1:
The system performs preliminary actions by maintaining a watchlist of users who have been denied access to data items. When data reclassification occurs, the system automatically notifies these pre-identified users, ensuring they receive timely information about newly accessible publicly available data without requiring manual intervention or access control list modifications.
2Reliability
If data reclassification monitoring is implemented, then user notification capability is improved, but system complexity increases
Solution Approach 1:
The authorization server performs self-service by autonomously monitoring for reclassification of data items and automatically generating notifications to users on the watchlist. The system independently detects when data becomes publicly available and handles the entire notification process without requiring external monitoring systems or complex integrated architectures, thereby maintaining reliability while limiting complexity growth.
3Ease of operation
If access control lists are modified to grant access, then user access rights are improved, but data security control is relaxed
Solution Approach 1:
Instead of proactively granting access to users by modifying access control lists, the system inverts the approach by maintaining a watchlist of users who were denied access and notifying them when data becomes publicly available. This allows users to obtain access rights through notification and self-service mechanisms rather than through administrative access control list modifications, thereby maintaining security controls while improving access ease.
Data Source
AI summary
A process of notifying users about publicly available data. In operation, an authorization server receives a request from a user to access a data item. The authorization server then determines a restriction status assigned to the data item. When the restriction status indicates that the data item is not publicly available for access, the authorization server identifies access rights associated with the user to the data item. If access rights indicate that the user does not have access to the data item, the authorization server denies user access to the data item, and responsively monitors for a reclassification of the restriction status assigned to the data item. The authorization server transmits a notification to the user indicating that the data item is publicly available for access by the user in response to detecting a reclassification of the restriction status indicating that the data item is publicly available.