Dynamic Access Control System for Privilege Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems face challenges in dynamically managing resource access privileges, leading to potential security breaches and inefficiencies, as they often grant unnecessary privileges or require manual intervention to adjust user roles, which is time-consuming and prone to errors.
Innovation Solution
An access control system that allows users to request resource access based on predefined conditions, with an automated determination of execution authority, enabling secure and timely authorization without over-granting privileges, using a processor and storage device to manage user access and role assignments dynamically.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If resource access privileges are granted in advance to improve user convenience, then user convenience is improved, but security deteriorates due to unnecessary privilege granting
Solution Approach 1:
The patent implements dynamic access control where user privileges are not fixed but adapt based on actual resource access requirements. The system dynamically determines necessary privileges at the time of access request rather than granting static privileges in advance, allowing the access control system to respond to changing conditions and grant only the minimum necessary permissions.
Solution Approach 2:
The system changes the parameter of privilege granting from a static state (pre-granted fixed privileges) to a dynamic state (privileges determined based on actual access conditions). By evaluating access requests against resource definitions and user roles at the time of request, the system adjusts the level of privilege granted to match the specific access scenario, preventing both over-privileging and under-privileging.
2Reliability
If resource access privileges are limited to prevent security risks, then security is improved, but user convenience deteriorates due to insufficient privilege granting
Solution Approach 1:
The system implements a feedback mechanism where access control decisions are continuously evaluated based on actual resource access patterns and requirements. When users request access to resources, the system evaluates the request against current resource definitions and user roles, providing feedback on whether access should be granted and at what privilege level, ensuring both security and user needs are met.
Solution Approach 2:
The access control system dynamically adjusts privilege levels based on actual access requirements rather than maintaining fixed limited privileges. This allows the system to start with conservative privilege assumptions and escalate to higher privilege levels when justified by the access request and resource definitions, balancing security with user convenience.
3Measurement precision
If manual adjustment of user roles is performed to manage access privileges, then access control accuracy is improved, but time consumption increases due to manual intervention
Solution Approach 1:
The system implements self-service access control where the system automatically determines and grants appropriate privileges based on resource definitions and user roles without requiring manual administrator intervention. The access control unit autonomously evaluates access requests against stored resource information and grants permissions according to predefined policies, eliminating manual role adjustment while maintaining accurate access control.
Solution Approach 2:
The system performs preliminary configuration of resource definitions and access policies in advance, storing them in the storage unit for automatic reference during access requests. By pre-defining resource characteristics, access conditions, and privilege levels, the system eliminates the need for manual role adjustment at the time of access requests, achieving both accuracy and efficiency through automated decision-making based on pre-established criteria.
Data Source
AI summary
An access control system stores information defining conditions under which each user is allowed to perform resource access. The access control system acquires a first access request indicating an operation for a first resource in a target system by a first user, determines based on the information whether or not the first access request is permitted, acquires a result of an additional permission/disapproval determination of the first access request in response to the disapproval determination of the first access request, and grants execution authority of the first access request by the first user according to the result of the additional permission/disapproval determination indicating permission.