Context-Based Data View System for Dynamic Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transmission systems struggle to dynamically manage access and viewability of data based on user attributes and policies, leading to potential unauthorized access even after initial authorization has been revoked, such as when a former employee still accesses encrypted data.
Innovation Solution
A data view system that utilizes an attribute engine to maintain a dynamic attribute list and a function engine to apply policies, allowing for real-time updates and flexible access control by generating views of data based on user attributes and functions, ensuring that only authorized users can access and view sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption methods are used to secure data, then data confidentiality is improved, but the system cannot dynamically revoke access or adapt to changing user attributes
Solution Approach 1:
The patent implements dynamic access control by making the decryption process dependent on real-time evaluation of user attributes against policy rules. The system continuously evaluates whether the current user context satisfies the access policy, allowing access rights to change dynamically without reissuing encryption keys. This resolves the contradiction by enabling both strong encryption and adaptive access control.
Solution Approach 2:
The system incorporates feedback mechanisms by continuously monitoring user attributes and policy changes, then adjusting access decisions accordingly. The attribute evaluation process provides feedback on whether current user characteristics satisfy access requirements, enabling the system to revoke or grant access dynamically based on changing conditions while maintaining encryption security.
2Adaptability or versatility
If access control policies are made dynamic and attribute-based, then adaptability and flexibility are improved, but system complexity increases
Solution Approach 1:
The patent segments the access control system into distinct functional components: attribute evaluation modules that assess user characteristics, policy interpretation modules that apply rules, and key management modules that handle cryptographic operations. This segmentation allows each component to be independently optimized and managed, reducing overall system complexity while maintaining flexibility.
Solution Approach 2:
The system introduces an intermediary attribute evaluation layer between the encrypted data and the decryption process. This intermediary evaluates user attributes against policies and determines whether decryption should proceed, without requiring complex changes to the underlying encryption algorithm itself. This mediator approach simplifies the overall architecture by isolating the complexity to a dedicated evaluation layer.
3Ease of operation
If data is made more publicly available, then accessibility and ease of use are improved, but security and access control become more difficult to maintain
Solution Approach 1:
The patent applies local quality by allowing different portions or aspects of data to have different access control requirements. The system can evaluate user attributes and apply different policy rules to different data elements or access scenarios, enabling fine-grained control where highly sensitive data receives stricter protection while less sensitive data remains more accessible, thus balancing accessibility with security.
Data Source
AI summary
In an implementation, a view of a set of data may be based on a context. The context may include an attribute associated with an attribute list. A set of symbols may be associated with the attribute list and the set of data. A key may be associated with the attribute list and a function list.