Dynamic Node Access-Control Caches for Knowledge Graph Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing knowledge graph systems inefficiently traverse the same portions of a knowledge graph multiple times to determine access control rights, leading to wasted computing resources and unnecessary duplicative checks across distributed devices.

Innovation Solution

Implementing a node caching system that generates, updates, and manages access control caches for key nodes in a knowledge graph, allowing quick lookup of access control rights for connected nodes without repeated traversals.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If knowledge graph systems traverse the knowledge graph multiple times to determine access control rights, then access control verification is performed, but computing resources are wasted and efficiency decreases

Engineering Contradiction:
Improveaccess control verificationVSAvoidquery processing efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system pre-computes and stores access control information in caches before queries are executed. Access control rights are determined in advance and stored for quick retrieval, eliminating the need for repeated traversals during query processing. This preliminary action resolves the contradiction by ensuring reliable access control verification while maintaining high query processing efficiency.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system creates copies of access control information and stores them in distributed caches across the knowledge graph system. Instead of repeatedly accessing the original access control data during queries, the system uses these pre-generated copies for verification. This copying mechanism ensures accurate access control while dramatically improving query efficiency by avoiding redundant traversals.

Inventive Principle:
Principle #26Copying

2Productivity

If knowledge graph systems perform access control checks and resource access in a single map traversal, then some efficiency is improved, but duplicative checks still occur across distributed devices

Engineering Contradiction:
Improveaccess control check efficiencyVSAvoidcomputing resource waste
Core Design Contradiction:
ProductivityVSLoss of energy

Solution Approach 1:

The system merges access control checks with the query execution process by integrating cache lookups into the traversal workflow. Access control verification is combined with resource access operations, allowing both to be performed in a single unified process. This merging eliminates duplicative checks across distributed devices while maintaining improved efficiency, resolving the contradiction between productivity and energy loss.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The system introduces access control caches as intermediary structures between the query system and the knowledge graph resources. These caches mediate by storing pre-computed access control information, allowing the system to verify permissions without repeatedly checking the original access control data. This intermediary mechanism reduces duplicative checks and computing resource waste while maintaining efficient access control verification.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Adaptability or versatility

If knowledge graph systems traverse to nodes on remote computing devices, then distributed resource access is enabled, but connection overhead and roundtrip costs increase

Engineering Contradiction:
Improvedistributed resource accessVSAvoidconnection setup time
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The system pre-loads access control information for remote nodes into local caches before queries require access to those nodes. By performing this preliminary data retrieval and caching, the system enables distributed resource access while minimizing connection overhead during actual query execution. This preliminary action resolves the contradiction by maintaining adaptability for distributed access while reducing time loss from repeated connection setups.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system creates and stores copies of access control data from remote nodes in local caches. Instead of repeatedly connecting to remote devices during queries, the system uses these pre-copied data locally. This copying approach enables full distributed resource access capability while eliminating the time penalty of repeated connection setups and roundtrip communications.

Inventive Principle:
Principle #26Copying

4Reliability

If multiple computing devices perform access checks on the same resource, then comprehensive access control is maintained, but duplicative checks waste computing resources

Engineering Contradiction:
Improveaccess control accuracyVSAvoidcomputing resource utilization
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system creates distributed copies of access control information across multiple computing devices through the cache network. Each device maintains local copies of relevant access control data, enabling comprehensive access control verification without requiring all devices to perform identical checks. This copying mechanism ensures access control accuracy while eliminating duplicative computational work, resolving the contradiction between reliability and productivity.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The access control caches act as intermediary structures that mediate between multiple computing devices and the centralized access control authority. Instead of multiple devices independently performing comprehensive access checks (which would be duplicative), the caches provide pre-computed access control information locally. This intermediary approach maintains access control accuracy while optimizing computing resource utilization across the distributed system.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS20250284835A1Systems and methods for improving access control verification in knowledge graphs by utilizing dynamic node-based access control caches
Publication Date: 2025.09.11 MICROSOFT TECHNOLOGY LICENSING LLC
  • US20250284835A1 patent drawing
  • US20250284835A1 patent drawing
  • US20250284835A1 patent drawing

AI summary

The present disclosure describes utilizing an access control cache associated with a key resource (e.g., node) of a knowledge graph that quickly and efficiently reduces the uncertainty of which other resources (e.g., connected nodes) in a knowledge graph are accessible to a given user identifier. For example, a node caching system dynamically generates, updates, manages, and utilizes access control caches associated with key nodes to signal access control rights of connected nodes in a knowledge graph with respect to a user identifier. In many instances, the node caching system improves efficiency over existing knowledge graph systems by providing access control rights information of connected nodes from an access control cache of a key node without needing to traverse the knowledge graph to other nodes or to travel to other connected nodes stored on separate computing devices.