Cell-Level Data Access Control via Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to effectively manage varying access rights for diverse types of data stored by organizations, leading to inconsistent data access restrictions across different user groups.
Innovation Solution
A system that determines access rights for stored data by combining implicit and explicit access rights based on user identity, using data tables to restrict or allow access to specific portions of data, and formats the retrieved data into reports for users, with implicit rules prioritizing access restrictions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a system implements varying access rights for different types of data, then data security is improved, but system complexity increases
Solution Approach 1:
The patent segments data into different types (confidential, internal, public) and implements access rights at the cell level within data tables. Each data type can have different access restrictions applied to specific rows, columns, or individual cells, allowing fine-grained security control without requiring a completely complex access control system for entire datasets.
Solution Approach 2:
The patent applies access rights locally to specific portions of data tables rather than uniformly across entire tables. Access restrictions can be applied to specific rows, columns, or cells based on the sensitivity and type of data in those locations, enabling differentiated security measures where needed while keeping other areas accessible.
2Reliability
If a system restricts access to sensitive data portions, then data security is improved, but data accessibility deteriorates
Solution Approach 1:
The patent divides data tables into accessible and restricted segments (rows, columns, cells) based on data sensitivity. Users can access unrestricted portions of data tables without permission issues, while only specific sensitive portions require explicit access rights, maintaining overall data accessibility while securing critical information.
Solution Approach 2:
The patent implements partial access control where only specific portions of data tables require access rights validation. Rather than restricting access to entire tables, the system applies restrictions only to specific cells or portions containing sensitive data, allowing users to access the majority of data without additional permissions.
3Measurement precision
If a system combines implicit and explicit access rights, then access control precision is improved, but processing complexity increases
Solution Approach 1:
The patent combines implicit access rights (based on user roles and data types) with explicit access rights (granted through permissions for specific data tables or portions). The system merges these two approaches to determine final access rights, providing precise control over data access while leveraging automated role-based defaults to reduce manual permission management.
Data Source
AI summary
Methods, systems, and computer-readable media for determining access rights for stored data are presented. Data tables may store data that is accessible to users. A request for explicit access to data may be received from a user. The system may determine the user's identity and further determine combined access rights based on the request for explicit access to data and the identity of the user. For example, implicit access rights for a user may be based on the identity. Based on the determined access rights, the system may retrieve data from the data tables. In an embodiment, the access rights may define that a first portion of a column is to be retrieved while a second portion of the column is to be restricted, or that a first portion of a row is to be retrieved while a second portion of the row is to be restricted.