Dynamic Access Control for Knowledge Graph Nodes

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Managing access rights to nodes in a knowledge graph is cumbersome and labor-intensive, especially as knowledge graphs grow, as existing solutions like access control lists require manual management and do not scale effectively.

Innovation Solution

A method and system for dynamic access control that structures nodes into hierarchically organized graph layers, assigning and changing access rights based on user parameters, access history, and conditions outside the graph, using concepts like node owner rights, active rights, read rights, and invisibility status, with dynamic propagation and restriction mechanisms.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual access control lists are used to manage knowledge graph nodes, then access rights can be assigned to users, but the management becomes cumbersome and labor-intensive as the knowledge graph grows

Engineering Contradiction:
Improveaccess control managementVSAvoidaccess rights management
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system enables self-service access control where users automatically receive appropriate access rights to knowledge graph nodes based on their profile attributes and the attributes of nodes they interact with, eliminating the need for manual access control list management

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

Access rights are dynamically determined by evaluating user parameters (profile attributes) and node parameters (graph layer, topic area) rather than using static access control lists, allowing the system to adapt to changing conditions automatically

Inventive Principle:
Principle #35Parameter changes

2Reliability

If access control lists are used for knowledge graph nodes, then user access can be controlled, but the solution does not scale effectively as knowledge graphs grow

Engineering Contradiction:
Improveaccess controlVSAvoidsystem scalability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system automatically determines and assigns access rights based on user profiles and node characteristics, enabling the access control mechanism to scale with the knowledge graph without requiring proportional increases in manual management resources

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

A single dynamic access control system handles all user-node access determinations across the entire knowledge graph, replacing multiple manual access control lists and enabling the system to scale efficiently as the knowledge graph grows

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11120150B2Dynamic access control for knowledge graph
Publication Date: 2021.09.14 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US11120150B2 patent drawing
  • US11120150B2 patent drawing
  • US11120150B2 patent drawing

AI summary

A computer-implemented method, system, and computer program product for dynamic access control to a node in a knowledge graph includes: structuring nodes of a knowledge graph into a plurality of hierarchically organized graph layers; assigning, to one or more users, an access right to a first node of the knowledge graph, the access right to the node selected from a plurality of access rights, where different types of users have different access rights; and assigning, to at least one user from the one or more users, an additional access right to a second node of the knowledge graph.