Hierarchical Data Access Control for Analysis Modules

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Data analysis systems face complexity in access right management when users need to share both data and analysis modules, leading to complications in ensuring that only authorized users access confidential information.

Innovation Solution

A data analysis system that acquires, stores, and displays data and analysis modules in a hierarchical structure, where access rights are managed by linking them with top hierarchical data items, allowing only authorized users to access and display the relevant data and modules through a controller that directs the display to show or hide items based on user permissions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If access rights are managed for both to-be-analyzed data and analysis modules separately, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidaccess right management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges the management of access rights for to-be-analyzed data and analysis modules into a unified system. The controller manages access rights for both data types together, and the display unit presents them in a unified hierarchical structure, allowing users to access both through a single permission framework rather than separate management systems.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The display unit is designed to universally display both to-be-analyzed data and analysis modules through a common hierarchical interface. This universal display mechanism allows the same interface to handle different types of objects (data and modules) with different access rights, simplifying the user experience while maintaining security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If access rights are managed for both to-be-analyzed data and analysis modules, then security is improved, but ease of operation deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidusability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent combines the display of to-be-analyzed data and analysis modules into a single hierarchical view. Users can access both data types through one unified interface rather than navigating separate systems, making the operation easier while maintaining security through the controller's access right management.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent segments both to-be-analyzed data and analysis modules into a hierarchical structure with multiple levels. This segmentation allows users to navigate through organized groups and subgroups, making it easier to locate and access specific items while the controller manages access rights at each level.

Inventive Principle:
Principle #1Segmentation

3Ease of operation

If all data and modules are displayed to users, then ease of operation is improved, but security deteriorates

Engineering Contradiction:
ImproveaccessibilityVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The controller acts as an intermediary between the display unit and the stored data/modules. It mediates access by determining which items should be displayed based on user access rights, allowing the display unit to present only authorized content without exposing confidential information, thus maintaining both security and ease of operation for authorized users.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS20240176468A1Data analysis system, analysis data display apparatus and data display method in data analysis system
Publication Date: 2024.05.30 SHIMADZU CORP
  • US20240176468A1 patent drawing
  • US20240176468A1 patent drawing
  • US20240176468A1 patent drawing

AI summary

A data analysis system according to this invention includes a data acquirer, a storage configured to store to-be-analyzed data items and analysis modules linked with top hierarchical data items, an analyzer, a display, and a controller configured to direct the display to display the to-be-analyzed data items and/or the analysis modules that are linked with the top hierarchical data item(s) whose access right (s) is/are provided to a user in the hierarchical structure, and to exclude the to-be-analyzed data items and the analysis modules that are linked with the top hierarchical data item(s) whose access right (s) is/are not provided to the user from items to be displayed on the display.