Filter Proxy Service for Dynamic Mobile Resource Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional solutions fail to effectively evaluate and manage access to resources on mobile devices, often resorting to denying access instead of determining whether resources should be accessible, especially when access conditions and policies are not preconfigured.
Innovation Solution
A filter proxy service is leveraged to determine whether resource access requests are approved, with a management application analyzing requests and aggregating results from multiple filter proxy services to make security decisions, allowing for caching of responses to reduce repetitive analysis and enhance network access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional solutions deny access to resources without preconfigured access conditions, then security is maintained through simple denial, but the ability to evaluate and provide controlled access to resources is lost
Solution Approach 1:
The patent introduces a filter proxy service as an intermediary between the mobile device and network resources. This mediator evaluates resource access requests against security policies and determines whether to allow or deny access, rather than simply denying all unpreconfigured access. The filter proxy service acts as a go-between that provides intelligent access control based on real-time evaluation of device state, user context, and resource characteristics.
2Ease of operation
If access control policies are preconfigured for all resources, then security evaluation is streamlined, but the complexity of configuration and maintenance increases significantly
Solution Approach 1:
The system performs preliminary actions by establishing security policies and filter rules in advance, but these are configured at a high level rather than for each individual resource. The filter proxy service pre-configures evaluation criteria based on device state, user roles, and security requirements, then automatically applies these to resource access requests without requiring manual configuration for each resource. This reduces configuration complexity while maintaining security evaluation capability.
3Reliability
If multiple filter proxy services are used to evaluate resource requests, then security evaluation comprehensiveness is improved, but the time required for access decision increases
Solution Approach 1:
The management application performs preliminary actions by caching security evaluation results and pre-establishing filter rules. When a resource access request is received, the system first checks cached results before consulting multiple filter proxy services, significantly reducing access decision time for previously evaluated resources. This caching mechanism maintains comprehensive security evaluation while minimizing the time impact of consulting multiple services.
Solution Approach 2:
The system applies partial action by selectively engaging multiple filter proxy services based on the specific resource and request context. Not all resources require evaluation by all filter proxy services - the system determines which services are necessary for each request, avoiding unnecessary evaluation steps while maintaining comprehensive security checks where needed. This selective approach reduces access decision time while preserving security thoroughness.
Data Source
AI summary
Secure application leveraging of a filter proxy service may be provided. In response to receiving a request to access a resource, a filter proxy service may be used to determine whether the request to access the resource is approved. If the request to access the resource is approved, the access to the resource may be allowed to continue.