Dynamic Access Control for Contact Privacy in Collaboration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In collaboration sessions, user contact information, such as email addresses, is inadvertently exposed to other participants due to automatic access granting, which can be undesirable in certain contexts.
Innovation Solution
A method and system that delay access to shared objects within a collaboration session until the user explicitly requests access and agrees to the consequences of sharing their contact information, adding them to the access control list only after consent is given, thereby protecting user contact information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If automatic access granting is implemented in collaboration sessions, then ease of operation is improved, but user contact information privacy is compromised
Solution Approach 1:
The system performs preliminary actions by pre-configuring access control lists and establishing access rules before collaboration sessions begin. Users' contact information is protected by default, and access is only granted when specific conditions are met, such as explicit user consent or administrator approval, rather than automatically upon session creation.
Solution Approach 2:
An intermediary access control mechanism is introduced between users and shared objects. The access control list acts as a mediator that controls who can access what information, preventing direct exposure of contact information while still enabling collaboration when appropriate permissions are granted.
2Loss of information
If access control lists are made visible to all participants, then information sharing is improved, but security is worsened
Solution Approach 1:
Different levels of information visibility are assigned to different users based on their roles and permissions. Instead of making all access control lists uniformly visible to all participants, the system applies local quality by allowing only authorized users to view specific portions of the access control information, thereby maintaining security while enabling necessary information sharing.
Solution Approach 2:
The access control information is segmented into different portions that can be selectively disclosed to different users. Rather than exposing the entire access control list to all participants, the system divides the information and selectively shares only what is necessary for each user's collaboration needs, protecting sensitive contact information while maintaining operational transparency.
Data Source
AI summary
A system and machine-implemented method for providing access to one or more shared objects to a user participating in a collaboration session, including receiving a request from a user to receive access to one of one or more shared objects within a collaboration session, each shared object having a corresponding access control list including one or more authorized users having access to the shared object, determining whether the user has access to the one of the one or more shared objects by referencing the access control list in response to receiving the request and adding the user as an authorized user within the access control list for each of the one or more shared objects when it is determined that the user does not have access to the one of the one or more shared objects, such that the user is provided access to the one or more shared objects.