Content-Based Access Control Policy Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current access control systems for electronic health records struggle to accurately determine which documents to apply permissions to, often relying on hierarchical structure or global classification, which can be complex and error-prone, especially for patients trying to manage sensitive information like mental health or AIDS records.
Innovation Solution
A system with a user interface for indicating topics and permissions, a document analyzer that finds distinguishing properties within document content, and an associating subsystem to create a fine-grained access control policy, allowing users to easily manage permissions without needing to understand the hierarchical structure of the information system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If access control systems rely on hierarchical structure or global classification to determine document permissions, then the system structure is simplified, but the accuracy of determining which documents to apply permissions to deteriorates
Solution Approach 1:
The patent replaces the mechanical hierarchical classification system with a content-based analysis system using natural language processing and information retrieval. Instead of relying on pre-defined hierarchical structures, the system analyzes document content directly to identify distinguishing properties and match them with user-specified topics, thereby improving document selection accuracy without increasing system complexity
Solution Approach 2:
The patent introduces a document analyzer as an intermediary component that bridges the user interface and the access control system. This analyzer contains an information retrieval module and a natural language processing module that work together to analyze document content, extract distinguishing properties, and match them with user topics, thereby improving the accuracy of document selection while maintaining system simplicity
2Stability of the object's composition
If users need to understand hierarchical structure to create access control policies, then the system can enforce structured organization, but the ease of operation deteriorates
Solution Approach 1:
The patent enables users to create access control policies without needing to understand the hierarchical structure of the information system. The document analyzer automatically analyzes document content, identifies distinguishing properties, and matches them with user-specified topics, allowing users to define permissions based on content rather than structure. This self-service approach improves ease of operation while maintaining organizational stability through automated content-based classification
Solution Approach 2:
The patent segments the document analysis function into distinct modules: an information retrieval module that selects relevant documents, and a natural language processing module that extracts distinguishing properties. This segmentation allows the system to handle complex content analysis independently from the user interface, enabling users to create policies without understanding the underlying hierarchical structure while maintaining organized document groupings
3Measurement precision
If the system uses content analysis to determine document permissions, then the accuracy of document selection improves, but the device complexity increases
Solution Approach 1:
The patent implements a universal document analyzer that handles multiple functions: information retrieval, natural language processing, and property extraction. This multi-functional component analyzes document content to identify distinguishing properties that can be matched with various user-specified topics, improving document selection accuracy across different domains without requiring separate systems for each function, thereby managing complexity through consolidation
Data Source
AI summary
A system for generating an access control policy comprises a user interface (1) for enabling a user to indicate a topic (10) and a set of permissions (15). A document analyzer (2) analyzes the content of a plurality of documents (11) to find a set of documents (13) relating to the topic (10). A property finder (5) analyzes the content of a plurality of documents (11) to find at least one distinguishing property (12) of documents relating to the topic (10). A document selector (6) selects the set of documents (13), based on the distinguishing property (12). An associating subsystem (3) associates the set of permissions (15) with the set of documents (13) to obtain an access control policy (4).