Cloud Storage Access Control via Device-Specific Rules
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud storage accounts face security challenges due to universal access, allowing users to access sensitive information from unauthorized devices, posing risks such as data theft and exposure to viruses.
Innovation Solution
Implementing access rules that restrict or enable access to content items or accounts based on device type, application type, and other criteria, allowing employers to control which devices can access their accounts, such as whitelisting authorized devices and restricting access on unauthorized ones.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If universal access to cloud storage accounts is allowed, then ease of access is improved, but data security deteriorates
Solution Approach 1:
The patent implements device-specific access rules that allow different levels of access for different devices. Authorized devices receive full access while unauthorized devices are restricted, creating localized security policies rather than universal restrictions. This resolves the contradiction by maintaining ease of access on trusted devices while blocking security risks from untrusted devices.
Solution Approach 2:
The patent segments access control by creating distinct categories of devices (authorized vs. unauthorized) with different access permissions. Access rules are applied separately to each device type, allowing the system to provide universal access to legitimate devices while restricting access from potentially harmful devices, thus resolving the security-access contradiction.
2Reliability
If access rules are implemented to restrict unauthorized devices, then data security is improved, but ease of operation deteriorates
Solution Approach 1:
The system automatically evaluates incoming access requests against stored access rules and makes authorization decisions without requiring manual intervention. The cloud storage system itself performs the security evaluation and access control, eliminating the need for users to manually approve or deny each access attempt while maintaining strong security controls.
Solution Approach 2:
Access rules are pre-configured and stored in the system before access requests occur. The system performs preliminary evaluation of device authorization status against these pre-established rules, enabling rapid automatic decisions that maintain security without impeding user convenience during actual access operations.
3Reliability
If device-specific access control is implemented, then data security is improved, but device complexity increases
Solution Approach 1:
The patent introduces an intermediary access control layer between the user and the cloud storage system. This intermediary component evaluates access requests against stored rules and mediates authorization decisions, centralizing the complexity in a dedicated module rather than distributing it throughout the entire system, thus managing complexity while maintaining security.
Data Source
AI summary
Various embodiments restrict or enable access to content items of an account based on login information or content request properties. For example, a synchronized online content management system can receive a request including one or more content request properties from a client device to access a user account. Access rules for the user account can be obtained and applied based on the content request properties to generate an access status. In one instance, the client device is provided with full account access if the access status indicates that the client device is an authorized device. In another instance, if the client device is an unauthorized device, at least one aspect of access to the user account is restricted.