Dynamic Enterprise Security Adjustment via Mobile Context
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional software security systems are static and inflexible, failing to adapt to rapidly changing security needs within computing environments, which can lead to reduced user productivity due to unnecessary access restrictions or lack thereof.
Innovation Solution
A method employing a mobile device to collect contextual information, such as location, behavior history, and schedule, to dynamically adjust security features of enterprise software, allowing for customizable rules to enhance security and adapt to changing circumstances.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static security mechanisms are used, then security stability is maintained, but adaptability to changing security needs deteriorates
Solution Approach 1:
The patent implements dynamic security mechanisms that automatically adjust access permissions and security policies based on real-time user behavior patterns, device context, and environmental factors. The system transitions from static security rules to dynamic decision-making that adapts to changing conditions while maintaining security stability through consistent policy enforcement.
Solution Approach 2:
The system incorporates feedback loops that continuously monitor user behavior, device characteristics, and security events to refine security decisions. User behavior analytics and contextual information feed back into the security mechanism, enabling adaptive responses to changing security needs while maintaining reliable protection through data-driven adjustments.
2Ease of operation
If static access permissions are used, then ease of operation is maintained, but productivity deteriorates due to unnecessary access restrictions
Solution Approach 1:
The security system performs self-adjustment by automatically analyzing user behavior patterns and device context to grant or restrict access permissions without requiring manual administrator intervention. Users experience seamless access control that adapts to their needs, maintaining ease of operation while eliminating unnecessary restrictions that would reduce productivity.
Solution Approach 2:
The system dynamically changes access permission parameters based on real-time evaluation of user behavior, device trust levels, and contextual factors. Instead of fixed access rules, the system adjusts parameters such as access duration, resource scope, and permission levels to optimize both ease of operation and productivity by granting access only when and where needed.
3Device complexity
If simplified security rules are used, then device complexity is reduced, but measurement precision of security needs deteriorates
Solution Approach 1:
The patent segments the security assessment process into multiple independent analysis modules, each evaluating specific aspects such as user behavior patterns, device characteristics, and environmental context. This segmentation allows complex security needs to be measured with high precision through specialized analysis while keeping the overall system architecture manageable and organized.
Solution Approach 2:
The system employs a universal security framework that can assess diverse security needs across different users, devices, and contexts using a common set of analytical tools and methodologies. This multi-functional approach enables precise security measurement without requiring separate complex systems for each assessment type, thereby reducing overall device complexity while maintaining measurement precision.
Data Source
AI summary
A system and method for facilitating configuring software security functionality. An example method includes employing a first computing device to collect information associated with a user of enterprise software, resulting in collected information; and dynamically adjusting one or more security features of enterprise software running on or accessible via a second device based on the collected information. The software running on the second device may include or represent the enterprise software that includes software security functionality. The collected information may include contextual information. An administrator user option facilitates adjusting the one or more rules.