Conditional Data Access Control via User Compliance Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data sharing technologies lack flexibility in controlling access, often resulting in either unrestricted sharing leading to loss of control for the original user or highly restricted access, failing to meet users' intuitive expectations regarding data ownership and control, especially in scenarios requiring temporary or conditional access.
Innovation Solution
A method and system that establish an access control policy defining collaborative conditions for data access, allowing access only when a predetermined number of users meet these conditions, with monitoring to ensure compliance, and providing access control mechanisms such as geographical and temporal conditions, along with encryption techniques to secure data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is shared freely without technical hindrance, then ease of data sharing is improved, but control over the data by the original user is lost
Solution Approach 1:
The patent implements dynamic access control where the data sharing state can change based on conditions. The system transitions between different sharing states (shared vs. restricted) based on temporal conditions, geographical conditions, or user presence, allowing the original user to maintain control while enabling flexible sharing when needed.
Solution Approach 2:
The system changes the parameters of data access by introducing conditional parameters such as time windows, location boundaries, and user presence requirements. These parameter changes allow the same data to be shared under different conditions, maintaining both ease of sharing and user control simultaneously.
2Reliability
If document security is applied to restrict access, then data security is improved, but flexibility in data sharing is reduced
Solution Approach 1:
The patent replaces static document security with dynamic conditional access control. Instead of permanently restricting or allowing access, the system dynamically adjusts access permissions based on real-time conditions such as user presence, location, and time, providing both security and flexibility.
Solution Approach 2:
The system introduces an intermediary access control layer between the data and users. This intermediary evaluates conditional parameters (temporal, geographical, presence-based) and mediates access requests, allowing secure yet flexible data sharing without requiring permanent security restrictions.
3Adaptability or versatility
If multiple versions of a document are shared through iterations, then collaborative editing capability is improved, but version control complexity increases
Solution Approach 1:
The patent applies preliminary action by establishing access control policies and conditions before collaborative editing begins. The system pre-defines the rules for data access and sharing, which automatically manage version control and access permissions throughout the collaboration process, reducing the complexity of manual version management.
4Adaptability or versatility
If physical devices are used to temporarily share data, then data control is maintained, but ease of data transfer is reduced
Solution Approach 1:
The patent replaces the mechanical system of physical device transfer with an electronic/digital system. Instead of physically moving devices or media to share data temporarily, the system uses digital data transfer with embedded access control policies that maintain user control while enabling convenient electronic sharing.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method and system are provided for enabling collaborative access to a data object. The method comprises establishing an access control policy, the access control policy defining at least one collaborative condition under which access to the data object is permissible, monitoring a plurality of users for compliance with the collaborative condition and providing access to the data object after a predetermined number of the users meet the at least one collaborative condition.