Distributed Authority Management via Segmented Object Handling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current information processing systems face challenges in managing and processing authority-related requests for objects across multiple systems, particularly in ensuring secure and efficient creation, update, and deletion of objects while maintaining data integrity and access control.
Innovation Solution
An information processing apparatus is designed with a first management unit for local object management, a second management unit for remote object management, a receiving unit for handling authority-related requests, and a processing unit that performs actions based on authority comparisons between owner and parent objects, enabling secure and efficient processing of requests such as creation, update, and deletion of objects.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authority verification is performed across multiple information processing apparatuses, then access control security is improved, but system complexity and processing overhead increase
Solution Approach 1:
The patent segments authority management into local and remote components. The first management unit handles local object management with full authority verification, while the second management unit handles remote object management. This segmentation allows security to be maintained for local operations while reducing complexity for remote operations by leveraging the local unit's authority verification capabilities.
Solution Approach 2:
The first management unit acts as an intermediary between the receiving unit and the second management unit. When authority verification is needed for remote objects, the first management unit performs the verification locally and communicates results to the second management unit, avoiding the need for direct complex verification across multiple apparatuses and reducing overall system complexity.
2Reliability
If all authority requests are processed by the first management unit, then data integrity is improved, but processing efficiency and scalability deteriorate
Solution Approach 1:
The patent divides processing responsibilities between two management units. The first management unit processes authority verification and creation/update/deletion operations for local objects, ensuring data integrity. The second management unit handles remote object operations by leveraging authority verification results from the first unit, improving processing efficiency and scalability for distributed operations.
Solution Approach 2:
The second management unit copies the authority verification capability from the first management unit. Instead of independently implementing full authority verification for each remote operation, the second unit leverages the verification results produced by the first unit, maintaining data integrity while improving processing efficiency through resource sharing.
3Adaptability or versatility
If distributed memory management is implemented across multiple apparatuses, then system scalability is improved, but data consistency and synchronization become more difficult
Solution Approach 1:
The patent implements feedback mechanisms where the first management unit provides authority verification results to the second management unit. This feedback loop ensures that remote operations on distributed memory maintain data consistency by leveraging centralized authority verification, allowing the system to scale while preserving reliability through coordinated validation.
Data Source
AI summary
An information processing apparatus includes a first management unit that manages information of an object, of which at least one of a parent or a child is determined, by a memory within the information processing apparatus, a second management unit that manages information of an object, of which at least one of a parent or a child is determined, by a memory accessible from plural information processing apparatuses, a receiving unit that receives a request which is intended for a target object managed by the first management unit or the second management unit, and a processing unit that performs processing corresponding to the request on information of the target object based on a comparison result between an owner object for which the piece of authority information is authorized and an object which is a parent of the authority object.