Geolocation-Based Data Access Control for Remote User Records
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data management systems lack effective methods to control access to sensitive data based on geographic location, which is crucial for preventing unauthorized access and fraud, especially in scenarios like online gambling and banking.
Innovation Solution
A method and system that determines the geographic location of a computing device and controls data access and changes based on predefined criteria, using a remote data processing system to verify the location and manage subsidiary and main data accordingly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data access control is enhanced with geographic location verification, then data security and fraud prevention are improved, but system complexity and processing time increase
Solution Approach 1:
The patent segments data into main data and subsidiary data, where subsidiary data is derived from main data through transformation. This segmentation allows the system to manage data access control more efficiently by distinguishing between core data structures and derived data, reducing the complexity of managing all data uniformly while enhancing security through location-based controls on specific data types
Solution Approach 2:
The patent introduces a geographic location verification mechanism as an intermediary between data access requests and data retrieval. This intermediary layer verifies user location against predefined criteria before allowing access, thereby enhancing data security without requiring fundamental changes to the core data management architecture, thus managing system complexity
2Reliability
If geographic location verification is performed for data access, then unauthorized access is prevented, but processing time increases
Solution Approach 1:
The patent performs preliminary actions by pre-defining geographic criteria for data access and pre-processing location verification. By establishing access rules in advance and preparing verification mechanisms beforehand, the system can quickly authenticate users during actual data access requests without time-consuming on-the-fly decisions, thus reducing processing time while maintaining secure access control
Solution Approach 2:
The patent utilizes parameter changes by transforming data parameters during the creation of subsidiary data from main data. This transformation process optimizes data structures for faster retrieval and access, allowing the system to maintain security through location-based parameter verification while reducing the time required for actual data access operations
3Adaptability or versatility
If comprehensive data management functions are provided at application level, then specific function requirements are met, but system complexity increases
Solution Approach 1:
The patent implements universality by creating a multi-functional data management system where main data serves as a universal source for multiple types of subsidiary data. The same main data structure can generate different subsidiary data types through transformation, allowing the system to meet diverse function requirements (access control, fraud prevention, data analytics) without requiring separate complex management systems for each function
Solution Approach 2:
The patent applies the nested doll principle by organizing data in a hierarchical structure where subsidiary data is nested within or derived from main data. This nested organization allows comprehensive data management functions to be implemented at different levels (main data level for core management, subsidiary data level for function-specific management), providing adaptability while managing complexity through clear hierarchical boundaries
Data Source
AI summary
Apparatus and methods for managing data in a computer system are disclosed. An example apparatus is to at least: determine a geographic location of a computing device associated with a user, the computing device remote from a data storage device, the data storage device including main data, first subsidiary data, and second subsidiary data associated with the user; change from the main data to a selected one of the first subsidiary data or the second subsidiary data based on the geographic location; and modify the selected one of the first subsidiary data or the second subsidiary data via the computing device.