Delegated Administration Event Query Lookup Table
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Delegated administration in hierarchical data structures faces inefficiencies in event queries, particularly in large-scale systems where administrators need to access and manage user events across multiple domains, leading to time-consuming processes due to the need to determine group affiliations and match them with administrator domains.
Innovation Solution
The technique involves saving event logs with group affiliations and determining administrator-owned groups, allowing for quick comparison between message groups and administrator groups to efficiently filter and present relevant events, reducing processing time by pre-calculating and storing parent group information in a lookup table.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional LDAP queries are used to determine group affiliations and match administrator domains for each event log entry, then accurate delegated administration control is achieved, but the query processing time increases significantly
Solution Approach 1:
The patent pre-calculates and stores the hierarchical group relationships in a lookup table during system initialization or when organizational structure changes occur. This preliminary action eliminates the need for time-consuming LDAP queries during event log retrieval, as the group hierarchy data is readily available in memory for immediate comparison with administrator domains.
Solution Approach 2:
The patent creates a copy of the organizational group hierarchy structure in the form of a lookup table that mirrors the LDAP directory structure. This copied representation allows for rapid local queries without accessing the original LDAP server, significantly reducing query response time while maintaining data accuracy.
2Reliability
If the system processes each event log entry by determining user group affiliation and matching with administrator domains, then complete administrative control is maintained, but the computational complexity increases
Solution Approach 1:
The complex task of determining group hierarchies and relationships is performed in advance and stored in a lookup table. This shifts the computational complexity from the query processing phase to the data preparation phase, simplifying the actual event log retrieval operations to simple table lookups and comparisons.
Solution Approach 2:
The lookup table acts as an intermediary data structure between the event log entries and the administrator domain definitions. It pre-resolves the complex hierarchical relationships, transforming the query process into simple comparisons between event groups and administrator domains without requiring complex real-time hierarchical traversals.
3Speed
If the system stores complete group hierarchy information in a lookup table for every event log entry, then query speed is improved, but the data storage requirements increase
Solution Approach 1:
The patent extracts only the essential group hierarchy information needed for delegated administration queries into the lookup table, rather than storing complete user profiles or all possible organizational data. This selective extraction reduces storage requirements while maintaining the necessary data for rapid query processing.
Solution Approach 2:
The lookup table is populated with pre-calculated group hierarchy data only when needed (during system initialization or organizational structure changes), rather than continuously updating or storing redundant information. This approach minimizes storage overhead while ensuring query-ready data is available when required.
Data Source
AI summary
When an event (for example, an e-mail message) is received at a server it is saved into a log file (or a summary is saved). The log entry for each message includes a set of groups within an organization to which the message is considered to belong. An administrator who has authority over any one of those groups is allowed to view this message. When an administrator logs onto the system it is determined which group or groups the administrator owns, i.e., for which groups the administrator has the authority to view their e-mail messages. For each e-mail log entry it is determined whether there is a group in common between the set of groups stored in the log entry and the groups that the administrator owns. A group in common indicates that the administrator is allowed to view that particular e-mail message.