Event-Based Data Access Authorization for Critical Unavailability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data access systems fail to provide timely and secure access to different levels of sensitive information when the data owner is unavailable, leading to potential delays in critical treatments or information access.
Innovation Solution
A secure data access system utilizing a machine learning model to determine event types and grant access to different security levels of data based on sensor input, even when the data owner is unavailable, employing encryption and decryption keys for varying security levels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual authorization is required for data access, then data security is maintained, but access time is delayed when the data owner is unavailable
Solution Approach 1:
The system performs preliminary actions by having data owners pre-configure authorization rules, event types, and security level mappings before events occur. When an event is detected, the system can immediately execute the pre-defined access authorization without requiring real-time manual approval, thus resolving the contradiction between security and access speed.
2Reliability
If different security levels are applied to different data, then data protection is optimized, but system complexity increases
Solution Approach 1:
The system applies parameter changes by dynamically adjusting the security level parameter based on the detected event type. Instead of maintaining complex static access control lists for every possible scenario, the system changes the security parameter automatically according to pre-configured event mappings, simplifying the overall system architecture while maintaining optimized data protection.
3Productivity
If automated event-based access is implemented, then access speed is improved, but security control is reduced
Solution Approach 1:
The system maintains security control through preliminary actions where data owners explicitly define authorization rules for different event types before deployment. The automated system only executes within these pre-approved boundaries, ensuring that while access speed is improved through automation, security control is preserved through prior human decision-making.
Data Source
AI summary
A system may include a memory device, a computing device and a sensor. The memory device may include a first partition and a second partition. The first partition stores first data of a first user at a first security level. The second partition is configured to store second data of the first user at a second security level different from the first security level. The computing device may include at least one processor that implements a machine learning algorithm. The sensor may be configured to provide information to the computing device. The machine learning algorithm analyzes the information from the sensor to determine an occurrence of an event. Based on a determination of the occurrence of the event, the computing device provides access to at least one of the first data or the second data to a second user.