Group Access Rights Management for Contract Change Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face significant workload when managing access rights for groups in organizations, particularly during contract changes or violations, requiring manual checks and restorations that are labor-intensive.
Innovation Solution
An authority management device that includes a management unit and controller to manage and change access rights for groups via identification information, using flag information to collectively invalidate or restore rights, reducing the need for manual checks and notifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If access right is managed for individual users, then precise control over each user's authority is achieved, but management complexity increases when contract changes occur
Solution Approach 1:
The patent segments access right management into two levels: group-level management (for contract-based control) and individual-level management (for precise authority control). This segmentation allows contract changes to be handled at the group level while maintaining precise individual control when needed, reducing management complexity during contract transitions.
Solution Approach 2:
The patent introduces a group dimension in addition to the individual user dimension for access right management. By managing access rights at both the group level (organization-based) and individual level (user-based), the system can efficiently handle contract changes at the group level while maintaining precise individual control when necessary.
2Reliability
If access right is suspended by deleting group information, then contract violation response is achieved, but restoration workload increases significantly
Solution Approach 1:
The patent performs preliminary action by backing up group access right information before suspension. When access rights need to be restored, the system can quickly retrieve the backed-up information and restore it without requiring time-consuming manual reconfiguration, thus reducing restoration time while maintaining contract compliance.
Solution Approach 2:
The patent creates a copy of the group access right information for backup purposes. This copy can be quickly restored when needed, avoiding the need to manually recreate access rights from scratch and significantly reducing restoration workload while ensuring contract compliance is maintained.
3Measurement precision
If manual checking of contract content is performed during restoration, then accuracy of access right restoration is ensured, but workload on person in charge increases
Solution Approach 1:
The patent uses copied backup information to automatically restore group access rights, eliminating the need for manual checking of contract content. The backup contains the original access right configurations, which can be restored with high accuracy without requiring person-in-charge intervention, thus improving restoration efficiency while maintaining accuracy.
Solution Approach 2:
The patent enables self-service restoration by using the backed-up information to automatically reconstruct group access rights. The system performs the restoration operation autonomously without requiring manual verification of contract terms, reducing the workload on the person in charge while ensuring accurate restoration based on the stored backup data.
Data Source
AI summary
An authority management device includes a management unit and a controller. The management unit manages, using a management table, in linkage with identification information for identifying a group to which a user who can access management target equipment, belongs, authority information representing one or a plurality of kinds of authority initially set for the group and representing authority invalidated after the initial setting. The controller executes acquiring a change request for the authority information and changing the authority information in response to the acquired change request.