Certificate Enchainment for Context-Aware Computing Resource Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for decision-making in business and analytics fail to effectively facilitate the presentation of alternative points of view and handling of diverse organizational structures, limiting the ability to model and simulate various perspectives.
Innovation Solution
A method for securing computing resources through the synthesis of control objects based on access and privilege information, using mediated associations to establish trust among entities, and enchaining certificates for secure computing actions, with encryption and decryption mechanisms to authorize and constrain rights based on entity-specific conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional access control systems are used to secure computing resources, then security is maintained, but the system cannot facilitate alternative points of view or diverse organizational structures
Solution Approach 1:
The system segments access control into multiple independent certificate entities, each representing different organizational structures or points of view. These certificate segments can be independently validated and combined, allowing the system to maintain security while supporting diverse organizational perspectives simultaneously.
Solution Approach 2:
The patent introduces certificate-based mediation as an intermediary layer between security validation and organizational structure representation. Certificates act as mediators that can encode different organizational relationships and points of view while maintaining a unified security validation mechanism through cryptographic verification.
2Reliability
If complex mediated associations with multiple entities are implemented, then trust relationships are enhanced, but system complexity increases
Solution Approach 1:
The system uses cryptographic copying where trust relationships are replicated across multiple certificate entities through cryptographic signatures. Instead of managing complex direct relationships between all entities, each entity holds a copy of trust information in the form of signed certificates, simplifying the overall system structure while maintaining comprehensive trust validation.
Solution Approach 2:
The patent implements nested certificate structures where certificates can contain or reference other certificates in a hierarchical enchainment. This nesting allows complex trust relationships to be organized in manageable layers, with each certificate encapsulating specific trust assertions that can be validated independently or as part of the broader chain.
3Measurement precision
If entity-specific encryption and decryption operations are performed, then access control precision is improved, but processing time increases
Solution Approach 1:
The system performs preliminary cryptographic setup by pre-establishing certificate chains and encoding access control policies within certificates before actual resource access operations. This preliminary action allows the system to use efficient cryptographic verification operations during runtime rather than performing complex encryption/decryption for each access request, reducing processing time while maintaining precise access control.
Data Source
AI summary
Synthesizing a control object for a computing event, the control object for securing a computing resource based on a set of access and privilege information provided through a set of mediated associations that are represented by an enchained set of certificates, portions of which are encrypted including entity-specific paths to entity-specific predecessor certificates and partial decryption keys therefor, wherein the control object is applied to secure the computing resource for performing a computing action indicated by a process-type entity identified in the certificate for the control object.