Cloud Access Policy Updates for Anomalous Login Parameters

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing static cloud access policies often lead to prolonged denial of access due to unexpected parameters, failing to adapt to frequent changes in cloud resource configurations and user status, resulting in inefficient and urgent access requests being rejected.

Innovation Solution

Implementing a proxy server that dynamically updates access policies in real-time based on connection parameters, using machine learning to assess risk and accommodate anomalous conditions, allowing immediate access when risk is within tolerance thresholds.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If static policies are used to secure cloud resource access, then security is maintained, but user access is delayed when unexpected parameters occur

Engineering Contradiction:

ImprovesecurityVSAvoidaccess delay

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent transforms static access policies into dynamic policies that automatically adapt to changing conditions. The system continuously monitors cloud resource configurations and user status, and automatically updates access policies in real-time based on current parameters, eliminating the need for manual policy reviews and reducing access delays while maintaining security.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent implements a feedback mechanism where the system continuously monitors cloud resource configurations and user status, compares current state against policy parameters, and automatically triggers policy updates when changes are detected. This closed-loop feedback system ensures policies remain current without manual intervention, resolving the contradiction between security and access speed.

Inventive Principle:

Principle #23Feedback

2Reliability

If manual policy review processes are implemented, then access decisions can be made, but management burden increases and review frequency decreases

Engineering Contradiction:

Improveaccess control accuracyVSAvoidmanagement complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent enables the access control system to serve itself by automatically detecting changes in cloud resource configurations and user status, evaluating these changes against security criteria, and updating policies without human intervention. This self-service capability eliminates the management burden of manual policy reviews while maintaining reliable access control decisions.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces the mechanical manual policy review process with an automated computational system that uses algorithms to evaluate change parameters and determine policy updates. This substitution eliminates the need for human managers to manually review and approve each access policy change, reducing complexity while maintaining control accuracy.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Device complexity

If static policies are used, then policy management is simple, but the system cannot adapt to frequent changes in cloud resource configuration and user status

Engineering Contradiction:

Improvepolicy management simplicityVSAvoidpolicy adaptability

Core Design Contradiction:

Device complexityVSAdaptability or versatility

Solution Approach 1:

The patent transforms static policies into dynamic policies that automatically adapt to changing conditions. The system continuously monitors cloud resource configurations and user status, and automatically updates access policies in real-time based on current parameters, eliminating the need for manual policy reviews and reducing access delays while maintaining security.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS12615296B2Dynamic updates to cloud access policies

Publication Date: 2026.04.28 MICROSOFT TECHNOLOGY LICENSING LLC

AI summary

The techniques described herein implement a proxy service associated with a public cloud platform. A proxy server receives a connection request sent via an account. The connection request includes a connection parameter such as a specific time the request is initiated, a specific location of a device used to initiate the request, or an identification of the device used to initiate the request. The proxy server maps the account to a policy. The proxy server then determines whether the connection parameter included in the request is anomalous to a corresponding parameter defined in the policy. In an event the connection parameter is an anomalous parameter, the proxy server takes actions to determine whether the policy can be dynamically updated to accommodate the anomalous parameter. If an accommodation can be made, a user or device does not have to wait an extended period of time to gain access to the resource.