Dynamic Node Access Caches for Distributed Knowledge Graph Access Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing knowledge graph systems face inefficiencies in managing access control due to repeated traversals and duplicative checks across distributed nodes, leading to wasted computing resources and overhead.

Innovation Solution

Implementing a node caching system that dynamically generates, updates, and manages access control caches for key nodes in a knowledge graph, reducing the need for repeated traversals by storing access control rights information for connected nodes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If existing knowledge graph systems perform initial access control checks by traversing the knowledge graph multiple times, then access control rights can be determined, but computing resources are wasted and efficiency decreases

Engineering Contradiction:
Improveaccess control verificationVSAvoidquery processing efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system performs access control checks in advance during knowledge graph traversal and stores the results in an access control cache. When subsequent queries require access control verification for the same resources, the pre-computed results are retrieved from the cache rather than re-traversing the knowledge graph, thereby resolving the contradiction between ensuring reliable access control and maintaining high query processing efficiency

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system creates copies of access control rights information and stores them in an access control cache. These cached copies contain the essential access control data needed for verification, allowing the system to avoid repeated full traversals of the knowledge graph while maintaining accurate access control decisions

Inventive Principle:
Principle #26Copying

2Adaptability or versatility

If knowledge graph systems traverse to nodes on remote computing devices, then distributed resources can be accessed, but connection setup costs and roundtrip traversal overhead increase

Engineering Contradiction:
Improvedistributed resource accessVSAvoidconnection setup and roundtrip latency
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The access control cache acts as an intermediary that stores access control rights information locally. Instead of directly traversing to remote nodes for access control verification, the system first checks the local cache, which contains pre-fetched access control data from remote devices. This intermediary cache eliminates repeated connection setup costs and roundtrip traversal latency while maintaining access to distributed resources

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If multiple computing devices perform duplicative access checks on the same resource, then access control can be verified from different devices, but unnecessary duplicative checks waste computing resources

Engineering Contradiction:
Improveaccess control verificationVSAvoidduplicative check overhead
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The system merges access control verification operations by implementing a shared access control cache that can be utilized by multiple computing devices. When one device performs an access control check and stores the result in the cache, other devices can retrieve the same cached result instead of performing duplicative checks, thereby reducing energy consumption while maintaining reliable access control verification across the distributed system

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS12373588B2Access control verification in knowledge graphs by utilizing dynamic node-based access control caches
Publication Date: 2025.07.29 MICROSOFT TECHNOLOGY LICENSING LLC
  • US12373588B2 patent drawing
  • US12373588B2 patent drawing
  • US12373588B2 patent drawing

AI summary

The present disclosure describes utilizing an access control cache associated with a key resource (e.g., node) of a knowledge graph that quickly and efficiently reduces the uncertainty of which other resources (e.g., connected nodes) in a knowledge graph are accessible to a given user identifier. For example, a node caching system dynamically generates, updates, manages, and utilizes access control caches associated with key nodes to signal access control rights of connected nodes in a knowledge graph with respect to a user identifier. In many instances, the node caching system improves efficiency over existing knowledge graph systems by providing access control rights information of connected nodes from an access control cache of a key node without needing to traverse the knowledge graph to other nodes or to travel to other connected nodes stored on separate computing devices.