Cross-Fabric ACL Control for Smart Terminal Configuration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cross-Fabric scenarios, a configuration device in one Fabric cannot control administrator privileges shared with a configuration device in another Fabric, leading to arbitrary configuration modifications by the latter.
Innovation Solution
A wireless communication method that includes sending configuration information with a target access control list (ACL) to a smart terminal, allowing the smart terminal to determine and restrict the access privileges of a second configuration device based on the ACL.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a configuration device in Fabric A shares administrator privileges with a configuration device in Fabric B through out-of-band mechanism, then the second configuration device can establish connection and control smart terminal, but the first configuration device loses control over the administrator privileges shared
Solution Approach 1:
The patent segments administrator privileges into specific configuration operations through Access Control Lists (ACLs). Instead of sharing complete administrator rights, the system divides privileges into discrete operational permissions that can be individually granted and controlled, allowing Fabric A to maintain oversight while enabling Fabric B's configuration device to perform specific tasks.
Solution Approach 2:
The patent applies local quality by assigning different access privilege levels to different configuration operations. The ACL mechanism allows specific operations to be permitted or restricted based on the source device, creating localized control policies that enable cross-Fabric configuration while maintaining security boundaries.
2Ease of operation
If a configuration device in Fabric B obtains full administrator identity for smart terminal, then it can fully control and configure the smart terminal, but arbitrary configuration modifications cannot be prevented
Solution Approach 1:
The patent implements preliminary anti-action by pre-configuring Access Control Lists that define which configuration operations are permitted. Before the second configuration device in Fabric B can modify smart terminal settings, the ACLs have already established restrictions on allowable operations, preventing arbitrary modifications while enabling necessary configuration tasks.
Solution Approach 2:
The patent changes the parameter of access privileges from a binary state (administrator/not administrator) to a multi-level permission system. By modifying how privileges are structured and granted, the system allows configuration capability while constraining it through operation-specific permissions defined in ACLs.
Data Source
AI summary
A wireless communication method and a configuration device are provided. The wireless communication method includes: a first configuration device sends configuration information to a smart terminal, wherein the configuration information includes at least a target ACL, and the target ACL is configured to indicate an access privilege that a second configuration device has for the smart terminal.


