Condensed Permission Database for Real-Time Access Queries
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems face challenges in efficiently managing user access permissions across large, geographically distributed computer systems, leading to prolonged response times, incorrect access privileges, and inefficiencies in data security, particularly in complex organizations with constantly changing structures and personnel.
Innovation Solution
The solution involves executing queries for access permissions in near real-time using an efficient storage technique that avoids exhaustive searches by condensing user information into user groups with common data access rights and maintaining a small database for directory permissions, allowing for a consolidated view of results across multiple file servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If conventional database queries are executed to determine user access rights across distributed file servers, then complete access permission information can be obtained, but response time becomes unacceptably prolonged due to exhaustive iterative searches through directories and access control lists
Solution Approach 1:
The system pre-calculates and stores access permission results in a condensed database before queries are executed. The condensed database contains pre-computed access rights information that can be quickly retrieved without performing exhaustive searches through directories and access control lists at query time, thus resolving the contradiction between obtaining complete permission information and maintaining fast response times
Solution Approach 2:
The invention creates a condensed copy of the access permission data from the distributed file system. This condensed database is a simplified representation that captures essential access rights information without containing the full complexity of the original distributed directory structures and access control lists, enabling fast queries while maintaining information accuracy
2Measurement precision
If exhaustive iterative searches are performed through directories of many file servers and their access control lists to determine user privileges, then accurate access permission data is obtained, but server performance and overall enterprise efficiency are adversely impacted
Solution Approach 1:
Access permission information is pre-computed and stored in a condensed database before queries are executed. This eliminates the need to perform exhaustive iterative searches through directories and access control lists when determining user privileges, thereby maintaining accurate permission data while preserving server performance and enterprise efficiency
Solution Approach 2:
The invention extracts only the essential access permission information from the complex distributed file system structures. By taking out and storing only the critical permission data in a condensed database format, the system achieves accurate privilege determination without the computational overhead of searching through complete directory structures and access control lists
3Measurement precision
If conventional access control list management techniques are used in large, complex organizations with constantly changing structures and personnel, then individual user access rights can be tracked, but the system becomes impractical and inaccurate due to the scale and complexity of the organization
Solution Approach 1:
The invention merges access permission information from multiple distributed file servers into a single condensed database. This consolidation allows the system to track individual user access rights across the entire enterprise while simplifying management operations, as administrators can query the condensed database rather than navigating complex distributed access control lists across numerous servers
Solution Approach 2:
A condensed copy of the distributed access permission system is created and maintained centrally. This condensed database replicates essential access rights information in a simplified format that is practical for management in large, complex organizations, maintaining tracking accuracy while improving operational feasibility
Data Source
AI summary
Queries regarding access permissions of users and rights to directories in a complex enterprise are executed in near real-time, using lookups to tables that form a condensed database maintained for each file server. User information is condensed by arranging users in user groups having common data access rights. Directory permissions storage is condensed by showing only distinctive permissions to a directory in a table entry, and referencing inherited permissions of parent directories. The tables indicate recursive and ancestral relationships among the user groups and directories. They are developed and updated in advance of any queries. A consolidated view of the query results is presented on a single display screen. Using the tables results can be obtained without exhaustive searches of large file system tables.