Authentication Framework for Contractual Geographical Restrictions

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems fail to effectively enforce contractual geographical resource restrictions (CGRR) on computing resources, leading to unauthorized access due to manual and inefficient processes, and lack of dynamic enforcement.

Innovation Solution

A method that converts natural language contractual geographical resource restrictions into machine logic rules, allowing for automated enforcement of access controls based on user location, using a system that receives contract data sets, applies natural language parsing, and determines access permissions accordingly.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If manual processes are used to enforce geographical resource restrictions, then flexibility in contract interpretation is maintained, but enforcement efficiency and reliability deteriorate

Engineering Contradiction:
Improveflexibility in contract interpretationVSAvoidenforcement efficiency
Core Design Contradiction:
Ease of operationVSProductivity

Solution Approach 1:

The patent replaces manual mechanical processes with an automated computer-based system that uses natural language processing and machine logic to enforce geographical restrictions. The system automatically parses contract text, extracts geographical constraints, and applies them to access requests without human intervention, thereby maintaining contract interpretation flexibility while dramatically improving enforcement efficiency and reliability.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Device complexity

If manual enforcement of geographical restrictions is used, then system complexity is kept low, but unauthorized access and security violations increase

Engineering Contradiction:
Improvesystem complexityVSAvoidaccess control reliability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The system enables self-service automation where the computer automatically performs contract analysis, geographical constraint extraction, and access decision-making without requiring complex manual configuration or intervention. The automated framework processes contract data sets, generates machine logic rules, and enforces them consistently, improving reliability while keeping the operational complexity manageable through standardized automated procedures.

Inventive Principle:
Principle #25Self-service

3Productivity

If automated enforcement systems are implemented, then enforcement speed and consistency improve, but system complexity and implementation difficulty increase

Engineering Contradiction:
Improveenforcement speedVSAvoidsystem implementation complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent creates a universal automated enforcement framework that can handle multiple contract types, geographical restriction formats, and access scenarios through a single integrated system. The natural language processing component universally parses various contract formats, and the machine logic generation capability adapts to different restriction types, thereby improving enforcement speed and consistency while managing implementation complexity through a multi-functional standardized approach.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11271944B2Authentication framework to enforce contractual geographical restrictions
Publication Date: 2022.03.08 KYNDRYL INC
  • US11271944B2 patent drawing
  • US11271944B2 patent drawing
  • US11271944B2 patent drawing

AI summary

Natural language contractual geographic resource restrictions (CGRR) are converted by computer into a set of machine logic based rule(s), and then the set of machine logic based rule(s) is used to control access to a set of computing resources in accordance with the CGRR in the operative contract. In some embodiments, the CGRR restrict access based on the geography of the prospective user, or customer, of the computing resources.