Classification Translation for Cross-Scheme Access Control Replication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing replication systems face challenges in sharing sensitive information between databases that use different classification schemes for information access control, leading to potential conflicts and unauthorized access due to the lack of inherent equivalence between classification markings.
Innovation Solution
The introduction of origin classifications, which include a unique identifier, concise representation, and rank, facilitates translation of classification markings across databases with different schemes, ensuring replication invariance and supporting asymmetrical translation rules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asynchronous replication scheme is used to improve availability, then system availability is improved, but information change conflicts may occur due to concurrent conflicting changes at different sites
Solution Approach 1:
The patent implements a feedback mechanism where classification markings are propagated along with data changes between replication sites. Each site monitors its own classification markings and compares them with received markings from other sites, providing feedback information that enables automatic conflict detection and resolution. This feedback loop allows the system to maintain asynchronous replication while managing conflicts through coordinated classification marking updates.
2Adaptability or versatility
If different classification schemes are used at different replication sites to maintain local access control policies, then local access control is preserved, but conflicts arise due to lack of inherent equivalence between classification markings
Solution Approach 1:
The patent introduces classification translation mechanisms that act as intermediaries between different classification schemes. When data changes are propagated between sites with different classification schemes, the system automatically translates classification markings using predefined translation rules. This intermediary translation layer allows each site to maintain its own classification scheme while ensuring consistent access control across the distributed system, without requiring all sites to use the same classification scheme.
3Stability of the object's composition
If synchronous replication is used to ensure consistency, then data consistency is improved, but system availability deteriorates due to requirements that all sites be available for each change
Solution Approach 1:
The patent applies preliminary action by pre-defining translation rules and classification marking correspondences between different classification schemes before replication conflicts occur. This preparation allows the system to handle asynchronous replication and classification scheme differences without requiring synchronous coordination at runtime, thereby maintaining data consistency while preserving system availability.
Data Source
AI summary
A computer-implemented method comprises obtaining export data representing a first classification in a first database that is to be imported into a second database, the first classification including a first set of classification markings that correspond to a first classification scheme identifier of the first database and that determine access to the first database and including a first plurality of origin classifications, each original classification of the first plurality of origin classifications including a classification scheme identifier; determining that a specific original classification of the first plurality of origin classifications has a specific classification scheme identifier matching a second classification scheme identifier of the second database; importing the specific original classification into the second database as an imported classification.