CAx Access Control via Component Segmentation and Placeholders
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computer-aided design (CAD) systems restrict simultaneous multi-user editing and access control, as only one user can edit a model at a time, and lack effective mechanisms to enforce access restrictions on sensitive components or export-controlled parts, potentially violating security and export regulations.
Innovation Solution
A method and system for computer-aided design access control that allows multiple users to manipulate parts simultaneously by verifying user access levels against component-specific access requirements, using a server to manage access and render only authorized portions of a part, with placeholders for restricted areas, such as a black sphere, to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multiple users are allowed to manipulate parts simultaneously, then productivity is improved, but security and access control deteriorate
Solution Approach 1:
The system segments the part model into multiple components, each with its own access control attributes. Users can be granted access to specific components based on their credentials, allowing simultaneous access to different portions of the model without compromising security. The rendering system segments the visualization to show only authorized components to each user.
Solution Approach 2:
The server acts as an intermediary between users and the part model. It verifies user credentials against component access requirements and controls what each user can view and edit. The rendering system serves as another intermediary, translating user credentials into visual representations that respect access controls by showing placeholders for restricted components.
2Reliability
If access control is enforced on sensitive components, then security is improved, but device complexity worsens
Solution Approach 1:
Access control attributes are applied locally to individual components rather than uniformly to the entire model. Each component can have its own security requirements, allowing fine-grained control where it is needed while leaving other components accessible. This reduces overall system complexity by applying controls only where necessary.
Solution Approach 2:
The system uses parameter-based access control where user credentials and component security requirements are defined as parameters. The server dynamically evaluates these parameters to determine access rights, avoiding complex hard-coded access control logic and simplifying the overall system architecture.
3Reliability
If restricted components are hidden from unauthorized users, then security is improved, but loss of information worsens
Solution Approach 1:
The system creates a customized copy of the part model for each user based on their access rights. Instead of hiding restricted components from the original model, the rendering system generates a user-specific representation where authorized components are shown and restricted components are replaced with placeholders. This preserves the complete model integrity while providing secure user-specific views.
Data Source
AI summary
A computerized method and system for computer-aided design access control is disclosed. The method includes receiving a part definition for a part at a server, the part definition comprising a plurality of components and a level of access required for each component of the plurality of components, receiving a request from a user to manipulate the part, the user being associated with a user access level, verifying the user access level against each level of access required for each component of the plurality of components, and presenting a render of the part to the user based on the part definition, the render comprising each component of the plurality of components where the user access level meets the associated level of access required and a placeholder for each component of the plurality of components where the user access level does not meet the associated level of access required.