Data Lake Access Provisioning via Policy-Driven API Gateway

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data access provisioning methods in large-scale environments are inefficient, prone to human error, lack scalability, and fail to provide effective monitoring and auditing, leading to vulnerabilities and delays in data access.

Innovation Solution

A data protection architecture that automates access provisioning using an API gateway and serverless functions to streamline request processing, integrate monitoring and auditing, and enforce security policies, reducing manual intervention and enhancing system integrity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If manual multistep process is used for access provisioning, then human control and customization are improved, but processing time and human error are increased

Engineering Contradiction:

Improvehuman controlVSAvoidprocessing time

Core Design Contradiction:

Ease of operationVSLoss of time

Solution Approach 1:

The system pre-configures security policies, access rules, and validation criteria in the database before access requests are received. This allows the automated system to quickly process requests by matching them against pre-established rules, reducing processing time while maintaining security control.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

An automated access provisioning system acts as an intermediary between users and data resources. This intermediary automatically validates requests, applies security policies, and provisions access without requiring manual human intervention for each request, significantly reducing processing time while maintaining control through automated decision-making.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If manual access provisioning is used, then flexibility in handling requests is improved, but scalability and consistency are worsened

Engineering Contradiction:

ImproveflexibilityVSAvoidscalability

Core Design Contradiction:

Adaptability or versatilityVSProductivity

Solution Approach 1:

The automated system uses universal security policies and access rules stored in the database that can be applied across multiple data resources and user types. This universal approach allows the system to handle diverse access requests consistently without manual intervention, improving scalability while maintaining flexibility through configurable policies.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system manages flexibility through parameterized security policies and access rules stored in the database. By changing parameters such as user roles, data sensitivity levels, and access conditions in the database, the system can adapt to different scenarios automatically, providing both scalability and flexibility without manual processes.

Inventive Principle:

Principle #35Parameter changes

3Productivity

If automated access provisioning is implemented, then processing efficiency is improved, but system complexity increases

Engineering Contradiction:

Improveprocessing efficiencyVSAvoidsystem complexity

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The automated access provisioning system is segmented into distinct functional modules: request reception, validation against security policies, database queries for access rules, automated decision-making, and access grant/deny execution. This segmentation allows each component to be independently managed and maintained, reducing overall system complexity while maintaining high processing efficiency.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system uses template-based security policies and access rules that can be copied and reused across multiple data resources and user scenarios. This copying approach simplifies system complexity by avoiding the need to create unique access control logic for each case, while still providing automated efficient processing through consistent rule application.

Inventive Principle:

Principle #26Copying

4Device complexity

If manual processes are used for access provisioning, then system simplicity is maintained, but monitoring and auditing capabilities are reduced

Engineering Contradiction:

Improvesystem simplicityVSAvoidmonitoring and auditing

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The automated access provisioning system incorporates feedback mechanisms that automatically log all access requests, validation results, and final decisions in the database. This automated feedback loop provides comprehensive monitoring and auditing capabilities, enabling reliable tracking of access patterns and security compliance without significantly increasing system complexity.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS20260105175A1Systems and methods for access provisioning using a data protection architecture

Publication Date: 2026.04.16 STATE FARM MUTAL AUTOMOBILE INSURANCE COMPANY

AI summary

Various examples, systems and methods are disclosed relating to access provisioning in a data lake environment. Some systems generate, using an entry function of an endpoint, a status of a request. Some systems log, using the entry function of the endpoint, the status of the request in a database system. Some systems verify, using the entry function of the endpoint, a payload corresponding to the request and that a requestor satisfies at least one of a security parameter or a compliance parameter of a first data resource of the data lake environment. Some systems update at least one of a setting or a permission to the first data resource according to the request.