Building Graph Access Rights Management via SPARQL Segmentation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing Building Management Systems (BMSes) face difficulties in providing access control to specific subsets of data without granting access to all BMS data, especially in multi-tenant environments, leading to security and accuracy issues with static snapshots of data.

Innovation Solution

Implementing a smart SPARQL Protocol and RDF Query Language (SPARQL) query system that allows administrators to select specific subjects and generate a tenant repository, enabling tenants to access only their relevant data within the graph database, while preventing access to the entire BMS data store.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If direct access to BMS data storage is provided to end users, then users can access their data, but all BMS data becomes accessible including unintended data

Engineering Contradiction:

Improveuser access to dataVSAvoidunintended data exposure

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent segments the BMS data storage into multiple tenant-specific repositories within the graph database. Each tenant has their own isolated repository that contains only their relevant data. This segmentation allows users to access their data directly while preventing exposure to other tenants' data, as each repository is logically separated and access-controlled at the repository level rather than requiring access to the entire BMS data storage.

Inventive Principle:

Principle #1Segmentation

2Ease of operation

If a mirrored copy of all BMS data is provided to customers, then access control is simplified, but the administrator cannot control what information is viewable by end users

Engineering Contradiction:

Improveaccess controlVSAvoiddata access control flexibility

Core Design Contradiction:

Ease of operationVSAdaptability or versatility

Solution Approach 1:

Instead of providing a single mirrored copy of all BMS data, the patent creates multiple segmented repositories within the graph database, each corresponding to a specific tenant. The SPARQL query system enables administrators to define precise access control by specifying which subjects and predicates each tenant can access. This approach maintains the simplicity of direct database access while providing fine-grained control over what information each end user can view, eliminating the need for administrators to manually curate mirrored copies.

Inventive Principle:

Principle #1Segmentation

3Ease of operation

If static snapshots of BMS data are used, then data access is simplified, but the data may be outdated or inaccurate

Engineering Contradiction:

Improvedata accessVSAvoiddata accuracy

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent implements continuous data synchronization by establishing persistent SPARQL endpoints that directly query the live graph database. Rather than providing static snapshots, the system maintains continuous connectivity between the tenant repositories and the underlying BMS data storage. This ensures that end users always access current, accurate data while the SPARQL query mechanism efficiently retrieves only the relevant subset of data needed by each tenant, maintaining both ease of access and data reliability.

Inventive Principle:

Principle #20Continuity of useful action

4Object-affected harmful factors

If per-user access rights are implemented on complete repository, then security is improved, but tenants cannot access different parts of the building

Engineering Contradiction:

Improvedata securityVSAvoidtenant-specific data access

Core Design Contradiction:

Object-affected harmful factorsVSAdaptability or versatility

Solution Approach 1:

The patent segments the monolithic repository into multiple tenant-specific repositories within the graph database, each with its own access control policies. This allows the system to provide strong security by requiring authentication and authorization for each repository while simultaneously enabling tenants to access their specific building parts through their designated repository. The SPARQL query system further refines access control by allowing administrators to specify which subjects and predicates are visible to each tenant, achieving both security and adaptability.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent adds a new dimension to access control by introducing tenant-specific repositories as an intermediate layer between users and the BMS data storage. This dimensional change allows the system to maintain security at the repository level while providing flexible, tenant-specific data access within each repository through SPARQL query filtering. The multi-layered access control structure enables both security and adaptability without compromise.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS20240143819A1Apparatuses, systems, and methods for providing access rights management in a building graph

Publication Date: 2024.05.02 SCHNEIDER ELECTRIC BUILDINGS AMERICAS INC

AI summary

Provided are systems, methods, and devices for providing access control to data of a system. Implementations may include providing an interface, receiving access control information via the interface, the access control information relating to a subset of the data of the system, generating an access control command based at least in part upon the received access control information, processing the access control command to create an external repository which is external to the system, the external repository including the subset of the data of the system, and providing access to at least a portion of the subset of the data of the system to a user.