Digital Twin Access Control via Intermediary Mediator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face complexity in managing access to digital twins, which are data objects representing physical items, due to varying access requirements and dependencies among multiple content providers, making it difficult to grant users comprehensive access while ensuring compliance with different ownership agreements and changing requirements.
Innovation Solution
A computer system that identifies secondary data objects within a primary data object, determines access requirements for both, and grants access by satisfying the conditions, allowing users to access and update digital twins while automatically updating access requirements based on changes, thereby managing access to complex relationships among dependencies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a digital twin includes multiple secondary data objects from different content providers, then the comprehensiveness of the digital twin is improved, but the complexity of managing access requirements increases
Solution Approach 1:
The patent introduces an intermediary access control mechanism that automatically manages access requirements for secondary data objects. This intermediary system evaluates access requests against the access requirements of all included secondary data objects and automatically determines whether to grant access, thereby resolving the complexity of managing multiple access requirements without reducing the comprehensiveness of the digital twin.
2Reliability
If access requirements for secondary data objects are strictly enforced, then compliance with ownership agreements is improved, but the ease of granting comprehensive access deteriorates
Solution Approach 1:
The system implements self-service access control where the access control mechanism automatically evaluates access requests against stored access requirements for secondary data objects. The system autonomously determines whether to grant or deny access based on whether the requester satisfies the access requirements, eliminating the need for manual verification and thereby maintaining compliance while simplifying the access granting process.
3Measurement precision
If access requirements are dynamically updated based on changes, then the accuracy of access control is improved, but the computational overhead increases
Solution Approach 1:
The patent implements preliminary action by pre-storing access requirements for secondary data objects when they are included in the digital twin. When access requests are evaluated, the system compares against these pre-stored requirements rather than recalculating from scratch. This preliminary preparation maintains accurate access control while reducing the computational overhead during actual access evaluation operations.
Data Source
AI summary
A computer system controls access to data. A request is received from an entity to access data comprising a primary data object corresponding to a physical item. One or more secondary data objects included in the primary data object are identified, wherein the one or more secondary data objects correspond to physical components of the physical item. Access requirements for the primary data object and the one or more secondary data objects are determined. In response to determining that the access requirements are satisfied by the entity, the entity is granted access to the data comprising the primary data object and the one or more secondary data objects. Embodiments of the present invention further include a method and program product for controlling access to data in substantially the same manner described above.