Centralized Database Access Management System

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing database access management systems are decentralized, leading to inconsistencies and errors when managing access lists across multiple monitoring systems, particularly when granting temporary access, as changes need to be made individually to each system, increasing the risk of oversight and compromising security.

Innovation Solution

A centralized database access management system that allows for unified management of access lists across a business or line of business, automatically granting and revoking access based on predefined time periods, reducing the need for manual intervention and minimizing errors.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a decentralized database monitoring system is used, then each system can independently manage its own access control, but managing access lists across multiple systems becomes difficult and error-prone

Engineering Contradiction:

Improveaccess control consistencyVSAvoidsystem architecture

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines multiple decentralized database monitoring systems into a single centralized system that maintains a unified access list. This single system manages access control for multiple databases, eliminating the need to maintain separate access lists in each decentralized system and ensuring consistency across all databases.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The centralized database monitoring system performs multiple functions: it monitors access to multiple different databases, manages a universal access list that applies across all systems, and provides centralized control for granting and revoking access. This multi-functional approach replaces multiple specialized decentralized systems.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Ease of operation

If manual updates are made to each access list individually, then access control can be customized per system, but errors and oversights increase when granting temporary access

Engineering Contradiction:

Improveaccess list managementVSAvoidtemporary access management

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The system provides self-service functionality by automatically revoking temporary access when the specified time period expires. The centralized system monitors the access list and automatically removes users who have exceeded their temporary access authorization, eliminating the need for manual intervention to revoke access and preventing oversight errors.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The system implements feedback mechanisms by tracking temporary access grants and automatically triggering revocation actions when expiration conditions are met. This closed-loop control ensures that temporary access is properly managed without requiring continuous manual monitoring or intervention.

Inventive Principle:

Principle #23Feedback

3Productivity

If multiple changes are made to access lists for temporary access, then access can be granted and revoked, but the process is time-consuming and prone to errors

Engineering Contradiction:

Improveaccess management efficiencyVSAvoidaccess list update time

Core Design Contradiction:

ProductivityVSLoss of time

Solution Approach 1:

When granting temporary access, the system preemptively schedules the revocation action for when the access period expires. This preliminary setup of the revocation timeline allows the system to automatically execute the access revocation without requiring additional manual intervention, thereby improving efficiency and reducing the time needed for complete access management.

Inventive Principle:

Principle #10Preliminary action

4Adaptability or versatility

If decentralized systems are used, then each system operates independently, but scalability is limited when adding new databases or systems

Engineering Contradiction:

Improvesystem scalabilityVSAvoidsystem architecture

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The centralized database monitoring system is designed to monitor and manage access to multiple different databases through a single universal interface and unified access list. This architectural approach allows easy addition of new databases without requiring separate monitoring systems, thereby improving scalability while maintaining manageable system complexity.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS8606817B2Database access unblocker

Publication Date: 2013.12.10 BANK OF AMERICA CORP

AI summary

Embodiments of the invention provide for a centralized system for database access management. In specific embodiments, the centralized system provides for granting users temporal access to databases for a prescribed period of time, such that upon expiration of the time period the user is automatically blocked (i.e., added back to the blacklist) from accessing the database. Moreover, as a result of centralized management, reporting and auditing of actions related to database access management are greatly improved in that all actions are recorded and a historical database of such actions is available to system users. In addition, the centralized system provides for automatic notification to predetermined stakeholders based on occurrence of predetermined system actions, such as blocking a user from database access, unblocking a user from database access (i.e., granting access) or the like.