Geofencing Cloud Data Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Legacy cloud-based content management systems lack effective geographical access control features, allowing unauthorized access from unsecure locations, which compromises the security of sensitive data.
Innovation Solution
Implementing geographical access control features in cloud-based storage platforms, enabling administrators to define precise geographic areas where data access is allowed or denied, using GPS location data and encryption techniques to ensure secure access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional user identification and password-based access control are used, then ease of operation is improved, but security is worsened because they cannot prevent access from unsecure geographic locations
Solution Approach 1:
The patent introduces geographic location as an additional access control parameter beyond traditional username and password. The system determines the user's geographic location using GPS coordinates and compares it against predefined geographic boundaries associated with the data container. This adds a spatial dimension to access control, preventing access when the user is outside authorized geographic areas even if credentials are correct.
2Reliability
If geographic access control is implemented, then data security is improved, but device complexity is worsened due to additional location tracking and boundary checking mechanisms
Solution Approach 1:
The mobile device automatically performs location tracking and sends geographic location information to the server without requiring manual user input. The system self-manages the complexity of geographic boundary calculations and access control decisions, reducing the burden on users while maintaining enhanced security.
Solution Approach 2:
The patent introduces a server as an intermediary that handles the complex logic of geographic boundary checking and access control decisions. The server receives location data from mobile devices, determines whether the location falls within authorized boundaries, and makes access decisions. This centralizes the complexity in the server rather than requiring complex client-side implementations.
3Reliability
If geographic boundaries are defined with arbitrary precision, then security is improved by accurately protecting sensitive data, but manufacturing precision requirements are worsened in terms of defining and managing geographic boundaries
Solution Approach 1:
The patent allows geographic boundaries to be dynamically defined and modified using various geometric shapes (circles, rectangles, polygons) with adjustable parameters. Administrators can flexibly configure boundary precision and shape based on specific security requirements. The system adapts to different precision needs by allowing configurable boundary definitions rather than requiring fixed-precision coordinates.
Data Source
AI summary
Disclosed is an approach to incorporate geographical access control features for a cloud-based storage platform. This allows, for example, enterprise administrators to define geographical areas (geofences) with arbitrary precision within which content access can be denied for items of data.