Dynamic Access Control via Risk Score Calculation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing software management systems face challenges in managing complex access control for large software projects with multiple developers, as they rely on labor-intensive manual authorization rules that are difficult to document and audit, and do not consider multiple factors for dynamic permission changes.
Innovation Solution
A system that automatically authorizes user access to computing applications by calculating a risk score based on user-centric and application-centric factors, allowing for just-in-time updates and dynamic permission adjustments, using a weighted sum of importance and technical experience factors, and conducting multiple-level risk analyses for nuanced authorization decisions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual authorization rules are implemented by system administrators, then access control can be established, but the process becomes labor intensive and error prone
Solution Approach 1:
The system automatically evaluates access requests by computing risk scores based on multiple factors (user role, application criticality, request type, etc.) without requiring manual administrator intervention. The authorization system serves itself by making automated decisions, eliminating the labor-intensive manual review process while maintaining or improving authorization accuracy through consistent multi-factor evaluation.
Solution Approach 2:
The patent replaces the mechanical manual authorization process with an automated computational system that calculates risk scores using weighted factors. This substitution transforms the manual, error-prone administrative task into an automated computational evaluation that consistently applies multiple criteria, improving both efficiency and reliability.
2Ease of operation
If single factor authorization is used to determine permission, then the decision process is simple, but it cannot consider other factors or last-minute changes
Solution Approach 1:
The authorization system dynamically evaluates multiple factors including user role, application criticality, request type, and temporal conditions. The risk score computation adapts to changing conditions by重新evaluating factors at the time of each access request, allowing the system to respond to last-minute changes while maintaining a structured evaluation process.
Solution Approach 2:
The patent combines multiple authorization factors into a composite risk score evaluation. Instead of relying on a single factor, the system integrates user characteristics, application properties, request details, and environmental conditions into a comprehensive multi-factor assessment, creating a versatile authorization decision mechanism.
3Ease of manufacture
If static permission application is used, then the authorization rule is easy to implement, but it cannot accommodate dynamic changes in user context or application state
Solution Approach 1:
The system implements continuous feedback by reevaluating authorization factors at the time of each access request. The risk score computation incorporates current user context, application state, and request characteristics, allowing dynamic permission adjustments based on real-time conditions while maintaining a consistent evaluation framework that is relatively easy to implement.
Data Source
AI summary
A computerized method is provided for automatically authorizing an access request from a user to perform a task with respect to a computing application of an application lifecycle management (ALM) system. The computerized method includes receiving, by a computing device, the access request from the user to perform the task with respect to the application in the ALM system and calculating, by the computing device, a risk score associated with the access request. Calculating the risk score includes determining a plurality of factors including: (i) at least one factor associated with the application indicative of an importance level of the application and (ii) at least one factor characterizing technical experience of the user, and computing the risk score as a weighted sum of the plurality of factors. The method further includes determining, by the computing device, whether to authorize the user access request based on the risk score.