External Approval Service for Group Communication Access Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing messaging and communication systems lack efficient mechanisms for managing external user approvals and resource sharing within group-based communication systems, leading to inefficiencies in user access control and collaboration.

Innovation Solution

An apparatus and method that utilize an external approval provisioning service to generate and manage authorization requests for resource sharing, allowing admin users to approve or deny access to group-based communication resources, and update a sharing approval repository with approval or denial indications, enabling seamless integration of external users into group-based communication channels and workspaces.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual approval processes are used for external user access requests, then security and privacy control is improved, but processing time and administrative overhead increase

Engineering Contradiction:
Improveaccess control securityVSAvoidapproval processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by automatically pre-approving external user access requests based on predefined policies and criteria. The approval service evaluates requests against stored policies before they reach human administrators, performing the approval action in advance and only requiring human intervention for exceptional cases that don't meet automated criteria.

Inventive Principle:
Principle #10Preliminary action

2Productivity

If automated approval mechanisms are implemented, then processing efficiency is improved, but system complexity and integration requirements increase

Engineering Contradiction:
Improveapproval processing efficiencyVSAvoidsystem integration complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary approval service that mediates between external user requests and the group-based communication system. This service acts as a buffer layer that handles automated policy evaluation and decision-making, simplifying the integration complexity by providing a standardized interface while implementing sophisticated automated approval logic internally.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Adaptability or versatility

If external users are integrated into group-based communication systems, then collaboration capabilities are improved, but security risks and privacy concerns increase

Engineering Contradiction:
Improvecollaboration capabilityVSAvoidsecurity risks
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system applies local quality by implementing differentiated access control policies for different external users based on their specific roles, requirements, and risk profiles. Rather than applying uniform security restrictions, the approval service evaluates each external user's requested access level and grants appropriate permissions locally tailored to their collaboration needs while maintaining security boundaries.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS11855953B2Methods and apparatuses for managing external approval provisioning and external messaging communication requests in a group-based communication system
Publication Date: 2023.12.26 SALESFORCE INC
  • US11855953B2 patent drawing
  • US11855953B2 patent drawing
  • US11855953B2 patent drawing

AI summary

Various embodiments of the present disclosure are directed to a group-based communication system that is configured to more efficiently manage resource sharing requests. In particular, in some embodiments, the group-based communication system is configured to enable admin users to use an external service, such as an external approval provisioning service, that is separate and distinct from the group-based communication system to manage group-based communication resource sharing requests. In other embodiments, the group-based communication system is configured to allow communication with external users and to trigger new user onboarding protocols through the ingestion of external user directories associated with a sponsor user.