Dynamic Resource Access Control Using Sensor-Based Secret Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional access control mechanisms for computing devices fail to adapt to rapidly changing conditions and long-term access scenarios, particularly in mobile environments, leading to potential inappropriate resource usage.
Innovation Solution
A computer-implemented method using a secret sharing scheme tied to sensor outputs, where access to resources is controlled by monitoring environmental and user conditions, enabling or preventing access based on sensor feedback to generate a correct secret key when conditions are met.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If conventional access control mechanisms are used, then access control can be implemented, but the system cannot adapt to rapidly changing conditions and long-term access scenarios
Solution Approach 1:
The patent implements dynamic access control by continuously monitoring sensor outputs (geographical location, network connectivity, device state) and dynamically generating or regenerating secret keys based on current conditions. The system transitions from static access control to a dynamic model where access rights are continuously adjusted according to real-time environmental factors, resolving the contradiction between adaptability and reliability.
Solution Approach 2:
The system establishes a feedback loop where sensor outputs are continuously monitored, access decisions are made based on current conditions, and secret keys are regenerated when conditions change. This feedback mechanism ensures the access control system adapts to changing scenarios while maintaining security, addressing both adaptability and reliability requirements.
2Adaptability or versatility
If access control is based on static factors, then the control mechanism is simple, but it fails to handle mobile environments where conditions change rapidly
Solution Approach 1:
The patent segments the access control mechanism into distinct functional components: sensor monitoring module, condition evaluation module, and secret key generation module. Each component handles specific aspects of access control independently, allowing the system to manage complexity through modular architecture while maintaining high adaptability to mobile environments.
Solution Approach 2:
The system changes the fundamental parameter of access control from static to dynamic by continuously monitoring sensor outputs and regenerating secret keys based on current conditions. This parameter change enables the system to handle mobile environments effectively, with the complexity managed through automated condition-based key regeneration rather than complex manual control mechanisms.
3Adaptability or versatility
If secret key generation is tied to sensor outputs, then adaptive access control is achieved, but the system complexity increases
Solution Approach 1:
The system implements self-service by automatically monitoring sensor outputs, evaluating conditions, and regenerating secret keys without requiring manual intervention. The access control mechanism serves itself by continuously adapting to changing conditions through automated processes, achieving adaptive access control while managing complexity through self-automation rather than complex external control systems.
Data Source
AI summary
There is provided a computer implemented method for accessing a resource at a computing device, as well as for controlling access to a resource by a computing device. The computing device receives a policy indicating a set of conditions under which access to the resource is permitted, determines whether each of the conditions are initially present based on an output of one or more sensors of the device, and monitors the one or more sensors to detect a change in the presence of one or more of the conditions. In response to detecting the change in the presence of one or more of the conditions, the computing device determines whether each of the conditions are present. In response to determining that each of the conditions is present, access to the resource is enabled. If at least one of the conditions is not present, access to the resource is prevented.