Graph Database Identity Management with ML Permission Recommendations

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for determining appropriate permissions for new employees in enterprise organizations are time-consuming and labor-intensive, often relying on static policies and manual updates, which can lead to inaccuracies and increased computing resource demands.

Innovation Solution

A system that uses a graph database to generate and update connections between user data and permissions, combined with machine learning-artificial intelligence (ML-AI) models to recommend permissions based on current and historical data, thereby providing adaptive and accurate access management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If static policies and manual updates are used for permission management, then implementation simplicity is maintained, but productivity decreases due to time-consuming manual processes

Engineering Contradiction:
Improvepermission assignment speedVSAvoidsystem complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system enables self-service permission management where the machine learning model automatically generates permission recommendations based on user profiles, role similarities, and historical data. Managers only need to review and approve recommendations rather than manually configuring each permission from scratch, significantly reducing the time and effort required for permission assignment while maintaining system accessibility.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent replaces manual mechanical processes with an automated machine learning system. Instead of managers manually reviewing and configuring permissions for each user, the system uses ML models to automatically analyze user data, identify appropriate permissions based on role similarities, and generate recommendations. This substitution dramatically improves productivity while the modular architecture keeps system complexity manageable.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Measurement precision

If isolated lists of accesses are referenced without context, then device complexity is reduced, but measurement precision decreases in identifying relevant accesses

Engineering Contradiction:
Improvepermission recommendation accuracyVSAvoiddata structure complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The system transitions from one-dimensional isolated permission lists to a multi-dimensional graph database structure. Nodes represent users, roles, permissions, and applications, while edges capture relationships between them. This dimensional expansion enables the ML model to analyze contextual relationships such as role hierarchies, permission dependencies, and user similarities, dramatically improving recommendation accuracy despite increased data structure complexity.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Solution Approach 2:

The graph database functions as a composite data structure combining multiple types of information (user profiles, role definitions, permission sets, application metadata, historical access patterns) into a unified framework. This composite structure allows the system to leverage diverse data sources simultaneously, improving the precision of permission recommendations by considering multiple contextual factors that isolated lists cannot provide.

Inventive Principle:
Principle #40Composite materials

3Measurement precision

If comprehensive user data is processed for each onboarding, then measurement precision improves, but use of energy increases due to computing resource demands

Engineering Contradiction:
Improvepermission determination accuracyVSAvoidcomputing resource consumption
Core Design Contradiction:
Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The system extracts and stores pre-computed features and relationships in the graph database during off-peak times. When a new user is onboarded, the ML model retrieves relevant pre-processed data (role definitions, permission templates, historical patterns) rather than processing all raw user data from scratch. This extraction strategy maintains high recommendation accuracy while significantly reducing the computing resources and energy required during the onboarding process.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The system performs preliminary processing of user data, roles, and permissions in advance, building the graph database structure and pre-computing relationship metrics before actual permission assignment occurs. Historical access patterns and role similarities are pre-analyzed and stored as structured data. When a new user needs permissions, the system leverages this pre-computed information rather than performing comprehensive analysis in real-time, reducing energy consumption while maintaining precision.

Inventive Principle:
Principle #10Preliminary action

4Adaptability or versatility

If individual permission selection is performed manually, then adaptability to specific user needs is improved, but loss of time increases due to labor burden

Engineering Contradiction:
Improvecustomization to user roleVSAvoidmanager time for permission configuration
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The system incorporates feedback loops where manager approvals and rejections of ML-generated recommendations are fed back into the training data. This allows the model to learn from actual decision patterns and improve its understanding of specific user role requirements over time. The feedback mechanism maintains high adaptability to individual user needs while progressively reducing the time managers spend reviewing recommendations as the model becomes more accurate.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The ML model performs self-service by automatically analyzing user profiles, comparing roles, and generating personalized permission recommendations tailored to each user's specific needs. This eliminates the need for manual individual permission selection while maintaining adaptability, as the model learns to customize recommendations based on the unique characteristics of each user role and organizational context.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS20250181737A1Methods and systems for identity and access management and governance using a graph database
Publication Date: 2025.06.05 CVS PHARMACY INC
  • US20250181737A1 patent drawing
  • US20250181737A1 patent drawing
  • US20250181737A1 patent drawing

AI summary

A method is provided including updating a graph database based on generating one or more new nodes and edges for the graph database associated with onboarding information for a first user. The method includes extracting, from the updated graph database, extracted graph data for the first user and inputting at least a portion of the extracted graph data for the first user into one or more machine learning-artificial intelligence (ML-AI) models to obtain one or more recommended user applications. The method includes causing display of the one or more recommended user applications on a display device, receiving second user input indicating approval for granting access to at least one recommended user application from the one or more recommended user applications, and providing instructions to direct a second computing platform to grant access to the at least one recommended user application.