Dynamic Authorization Rules for Vulnerability-Responsive Access Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing systems fail to dynamically assess the validity of authorization rules in response to updates in system vulnerabilities, rendering them unreliable over time.

Innovation Solution

An authorization device that includes a valid condition assessment unit to evaluate authorization rules based on countermeasure scenarios addressing vulnerabilities, ensuring the rules remain valid despite changes in system vulnerabilities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authorization rules are established based on static security assessments, then initial security coverage is achieved, but the rules become unreliable over time as vulnerabilities are updated

Engineering Contradiction:

Improveauthorization rule validityVSAvoidtime lag in vulnerability response

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent implements dynamic authorization rules that automatically adapt to changing vulnerability conditions. The system continuously monitors vulnerability updates and adjusts authorization rules in real-time, transforming static security policies into dynamic ones that maintain reliability without time lags. This resolves the contradiction by making the authorization system responsive to temporal changes in the security landscape.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system establishes a feedback loop where vulnerability assessment results continuously inform authorization rule updates. The vulnerability assessment unit periodically evaluates system vulnerabilities, and these results feed back to automatically adjust authorization rules. This closed-loop feedback mechanism ensures authorization rules remain reliable by incorporating the latest vulnerability information without manual intervention or time delays.

Inventive Principle:

Principle #23Feedback

2Reliability

If authorization rules are manually updated to reflect new vulnerabilities, then security reliability is maintained, but the complexity and time required for updates increase

Engineering Contradiction:

Improveauthorization rule validityVSAvoidauthorization management complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system implements self-service automation where the authorization management unit automatically generates and updates authorization rules based on vulnerability assessment results. The system serves itself by autonomously responding to vulnerability changes without requiring manual security administrator intervention. This reduces management complexity while maintaining reliability through automated rule adaptation to new vulnerabilities.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The system performs preliminary vulnerability assessments and prepares authorization rule updates in advance before actual security threats materialize. By continuously monitoring and pre-computing appropriate authorization adjustments, the system is ready to immediately respond to vulnerability updates, reducing the complexity of reactive manual updates while maintaining continuous reliability.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If comprehensive vulnerability assessments are performed frequently, then authorization rule validity is maintained, but the computational resources and time required increase

Engineering Contradiction:

Improveauthorization rule validityVSAvoidcomputational resource consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system implements periodic vulnerability assessments at optimized intervals rather than continuous monitoring. The vulnerability assessment unit performs evaluations at predetermined time intervals or triggered by specific events, balancing the need for reliable authorization rules with reduced computational resource consumption. This periodic approach maintains authorization validity while avoiding excessive energy usage associated with continuous assessment.

Inventive Principle:

Principle #19Periodic action

Solution Approach 2:

The system dynamically adjusts assessment parameters such as evaluation depth, frequency, and scope based on risk levels and system state. When vulnerabilities are low, assessments are performed with reduced intensity and longer intervals, conserving computational resources. When high-risk vulnerabilities are detected, the system intensifies assessment parameters to maintain authorization reliability. This adaptive parameter adjustment optimizes the balance between reliability and resource consumption.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS20250365284A1Authorization device, authorization method, and non-transitory computer readable medium

Publication Date: 2025.11.27 MITSUBISHI ELECTRIC CORP

AI summary

An authorization device (100) includes a valid condition assessment unit (180) that assesses whether a valid condition is met so as to judge whether an authorization rule is valid or not. The valid condition is a condition which is generated on a basis of a countermeasure scenario to address a vulnerability related to access to a target system storing an electronic file, and which concerns an authorization target requiring authorization for access to the target system. The authorization rule is a rule for the valid condition and authorizes access to the target system.