Automatic User Group Manager for Dynamic Security Classification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional multi-user computer systems rely on manual and subjective methods for user grouping, which are prone to human error, slow to implement, and fail to accurately reflect user behavior, leading to inefficient data protection and security management.

Innovation Solution

An Automatic User Group Manager (AUGM) system that monitors user activities and creates behavioral signatures to automatically determine when users should be reassigned to different groups based on their behavior, using a Degree of Variance (DoV) calculation and predetermined thresholds.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If manual user grouping is used based on formal data (job function, department), then user group assignments can be established, but the grouping is prone to human error and does not accurately reflect actual user behavior

Engineering Contradiction:
Improveaccuracy of user behavior classificationVSAvoidmanual configuration effort
Core Design Contradiction:
Measurement precisionVSEase of operation

Solution Approach 1:

The system enables automatic user grouping where the computer system itself performs the classification task by monitoring user activities, generating behavioral signatures, and autonomously assigning users to groups based on calculated degree of variance, eliminating the need for manual administrator intervention

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent replaces the manual mechanical process of administrator-based user grouping with an automated computational system that uses behavioral monitoring, signature generation, and algorithmic variance calculation to dynamically classify users based on actual behavior patterns

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If manual user grouping is performed by administrators, then user groups can be created, but the process is slow to implement and requires extensive involvement of privileged persons

Engineering Contradiction:
Improvespeed of user group implementationVSAvoidsystem automation level
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system performs automatic user grouping without requiring administrator intervention, where the computer system autonomously monitors user activities, calculates behavioral signatures, determines degree of variance, and assigns users to appropriate groups, dramatically improving implementation speed

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system continuously monitors and collects user activity data in advance, maintaining up-to-date behavioral signatures that enable immediate and accurate user group assignments when needed, rather than requiring manual assessment at the time of grouping

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If pre-defined vendor or manual rules are used in DLP systems, then data protection controls can be enforced, but the rules cannot adapt to actual user behavior patterns

Engineering Contradiction:
Improveadaptability to user behaviorVSAvoiddata protection effectiveness
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent implements dynamic user grouping where group assignments are not static but continuously updated based on real-time behavioral monitoring and degree of variance calculations, allowing the system to adapt to changing user behavior patterns while maintaining reliable data protection

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system continuously monitors user activities, compares actual behavior against group behavioral signatures, and uses the degree of variance feedback to automatically reassign users to appropriate groups, creating a closed-loop system that adapts to behavioral changes while maintaining security policy effectiveness

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS12244602B2Automatic user group manager
Publication Date: 2025.03.04 ACRONIS INT
  • US12244602B2 patent drawing
  • US12244602B2 patent drawing
  • US12244602B2 patent drawing

AI summary

A system of automatically managing assignments of users to user groups comprisesa processor to implement instructions for an automatic user group manage (AUGM) to access to two or more users and the assignments of the users to the user groups, observe activity of the users, calculate user behavior signatures for one of at least two users of the users, at least one user of the users and one group of the user groups, or at least two groups of the user groups, calculate a numeric degree of variance between at least two of the user behavior signatures, compare the calculated degree of variance to at least one threshold, and determine if a behavior of one of the at least two users, the at least one user and the one group, or the at least two groups are similar or different.