Entity Transfer Access Control via Segmentation Flags
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Complex systems face challenges in maintaining access control and smooth transitions when transferring entities between systems, especially during multi-stage processes involving split entities, which can disrupt access rights and data integrity.
Innovation Solution
A computer-implemented method and system for process control during entity transfer, utilizing flags to segregate non-divested and to-be divested data and resources, providing controlled access transitions from the transferor to the transferee, ensuring continuity and security throughout the transfer stages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data and resources are segregated utilizing flags in memory during entity transfer, then access control and data integrity are maintained, but system complexity increases due to multiple access levels and transition states
Solution Approach 1:
The patent segments data and resources into distinct categories (non-divested data, to-be divested data, divested data) using flags in memory. This segmentation allows different access control rules to be applied to each category, maintaining reliability while managing complexity through structured organization. The flags create clear boundaries between data types that require different access permissions during the transfer process.
Solution Approach 2:
The patent implements dynamic access control where access permissions change based on the transition state (pre-transitional, transitional, post-transitional). The system dynamically adjusts who can access what data at each stage, allowing full access to non-divested data by transferor while providing limited access to to-be divested data. This dynamic approach maintains reliability without requiring permanently complex structures.
2Ease of operation
If full access is provided to user data by transferor and user during pre-transitional state, then ease of operation is maintained, but security risks increase due to potential unauthorized access to to-be divested data
Solution Approach 1:
The patent applies local quality by providing different access levels to different data categories simultaneously. Users maintain full access to non-divested data for ease of operation, while restricted access is applied specifically to to-be divested data to mitigate security risks. This localized differentiation of access permissions allows the system to maintain operational continuity without exposing security vulnerabilities.
Solution Approach 2:
The patent introduces an intermediary access control mechanism that mediates between user access requests and data security requirements. The system acts as an intermediary layer that allows full access to appropriate data while blocking or limiting access to sensitive to-be divested data, thus maintaining ease of operation for legitimate users while preventing unauthorized access to protected resources.
3Reliability
If access credentials are updated during transitional state, then security is improved, but loss of time occurs due to user disruption and access restrictions
Solution Approach 1:
The patent performs preliminary actions by pre-establishing the flag structure and access control rules before the actual entity transfer occurs. During the transitional state, the system has already prepared the framework for credential updates and access restrictions, allowing for smoother transitions with minimal user disruption. The preliminary setup reduces the time required during actual credential updates by having the infrastructure ready.
Solution Approach 2:
The patent maintains continuity of useful action by ensuring that users can continue to access non-divested data and resources without interruption during the transitional state. While security measures are implemented and credentials are updated, the system maintains continuous access to essential data, minimizing the perceived loss of time and maintaining productivity throughout the transition process.
4Manufacturing precision
If to-be divested data and resources are segregated from non-divested data, then manufacturing precision of data transfer is improved, but device complexity increases due to additional access control mechanisms
Solution Approach 1:
The patent segments data into precisely defined categories (non-divested, to-be divested, divested) with clear boundaries marked by flags. This segmentation enables precise control over what data is transferred and what remains, improving manufacturing precision of the data transfer process. The structured segmentation manages complexity by creating a systematic framework rather than ad-hoc access control.
Solution Approach 2:
The patent uses parameter changes in the form of flags and access control parameters to precisely control data transfer. By changing the state of flags and access parameters based on the transition phase, the system achieves precise control over data segregation and transfer timing. This parameter-based approach improves transfer precision while managing complexity through standardized parameter management rather than complex structural changes.
Data Source
AI summary
A computer-implemented system and method are provided for process control during a transfer of an entity from a transferor system to a transferee system. The method comprises, in a pre-transition state, storing data of a user in the memory comprising combined non-divested data that remain with the transferor, and to-be divested data that are a part of the entity and remain with the entity during and after the transfer. In a transitional state, the method provides full access to the user data by the transferor, provides additional limited access to the to-be divested data by the transferee, receives required new access credentials permitting the user to access the to be divested data, and partially restricts access to the to-be divested data. In a final state, the method divests the to-be divested data, making it divested data, and removes access to the divested data by the transferor.