File Access Credentials With Time-Window Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Credential-based file access systems do not account for time constraints, allowing unauthorized access by malicious users or software outside defined periods, leading to potential security breaches and misuse.
Innovation Solution
Implementing time-based access controls by associating files or directories with metadata that define allowed access times, ensuring access is granted only within specified time windows, complementing traditional credential-based authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If credential-based access control is implemented, then user authentication is simplified, but time-based security constraints are lost
Solution Approach 1:
The patent combines credential-based authentication with time-based access control by integrating two access control mechanisms. The system checks both credentials and time windows when evaluating access requests, merging traditional authentication with temporal constraints to achieve both ease of operation and time-based security reliability
Solution Approach 2:
The patent adds a temporal dimension to traditional credential-based access control. Instead of only checking whether credentials are valid, the system now evaluates both credential validity and whether the current time falls within the authorized time window, thereby adding time as an additional dimension of access control
2Reliability
If time-based access control is added to credential-based system, then security against unauthorized access is improved, but system complexity increases
Solution Approach 1:
The patent segments the access control decision into distinct components: credential validation and time window validation. These are handled as separate checks within the access control logic, allowing the system to manage complexity by breaking down the access decision process into manageable segments rather than a monolithic system
3Ease of operation
If access is granted to authenticated users at all times, then user convenience is maximized, but security vulnerability increases
Solution Approach 1:
The patent introduces dynamic access control where the availability of resources changes over time. Access is not static but dynamically adjusted based on time windows, allowing users to access resources conveniently during authorized periods while automatically restricting access during unauthorized periods, thus balancing convenience with security
Data Source
AI summary
Time based file access credentials are disclosed herein. For instance authentication data representing a user identifier and a user password associated with the user identifier is received from user input associated with a user identity. In response to determining that the user identifier and the user password are valid and are associated with the user identity and based on first metadata associated the user identity, it is determined that the user identity is authorized to access storage server equipment associated with the authentication server. Furthermore, based on second metadata associated with data resources stored on the storage server equipment, it is determined that the user identity is permitted access to at least one data resource of the data resources.