Directory Service Class of Service Management via Power of Two Model

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems face challenges in managing and maintaining accurate class of service attributes for users and resources in directory services, leading to potential mismatches and unauthorized access rights, especially as roles and resources within an organization change over time.

Innovation Solution

A system that utilizes a processor to access classification information from reference databases, applies a power of two classification model to create and manage class of service attributes, and detects mismatches by performing mathematical operations on numerical values, allowing for automated reporting and categorization across multiple platforms like Active Directory and Network Information Services.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If manual management of class of service attributes is used, then accuracy can be maintained, but time consumption and labor requirements increase

Engineering Contradiction:
Improveaccuracy of class of service attributesVSAvoidtime consumption for management
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system automatically manages class of service attributes by retrieving classification information from reference databases and applying power of two classification models without requiring manual intervention. The processor autonomously creates, updates, and monitors class of service attributes, eliminating the need for manual management while maintaining accuracy.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system continuously monitors class of service attributes and compares them against classification information from reference databases. When mismatches are detected through mathematical operations on numerical values, the system generates reports and can automatically correct attributes, creating a feedback loop that maintains accuracy without manual oversight.

Inventive Principle:
Principle #23Feedback

2Productivity

If automated classification systems are implemented, then time efficiency improves, but complexity of the system increases

Engineering Contradiction:
Improvetime efficiency of classificationVSAvoidsystem complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system transforms complex classification data into simplified numerical parameters using power of two classification models. By converting classification information into numerical values that can be processed through mathematical operations, the system reduces computational complexity while maintaining automated classification capabilities.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The system introduces reference databases as intermediaries that store classification information in a standardized format. These databases act as mediators between the raw data and the classification processing logic, simplifying the overall system architecture by centralizing classification rules and data sources.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If comprehensive monitoring of access rights is implemented, then security improves, but computational resources required increase

Engineering Contradiction:
Improvesecurity of access controlVSAvoidcomputational resources
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system performs partial monitoring by focusing computational resources on detecting mismatches between expected and actual class of service attributes rather than continuously validating all access rights. By using mathematical operations on numerical values to identify anomalies, the system achieves adequate security monitoring with reduced computational overhead.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS8832110B2Management of class of service
Publication Date: 2014.09.09 BANK OF AMERICA CORP
  • US8832110B2 patent drawing
  • US8832110B2 patent drawing
  • US8832110B2 patent drawing

AI summary

According to one embodiment of the present invention, classification of objects in a directory service may be managed. An object is identified in a directory service. Classification information associated with the object is received from a reference database. Using a processor, a rule that specifies a value that corresponds to the classification information is accessed. The accessed value is based on a power of two classification model. Using the processor, the class of service attribute is created using the value. The class of service attribute is associated with the object listed in the directory service using the processor.