Hierarchical Entitlement System with Integrated Limit Checks

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current hierarchical role-based systems in financial services lack an effective and flexible mechanism for maintaining control of limit checks across both functions and objects, failing to efficiently authorize and enforce cumulative limits across multiple dimensions.

Innovation Solution

A hierarchical entitlement system with integrated inheritance and limit checks is implemented, allowing for the specification and enforcement of financial transaction entitlements by defining entitlement groups with permissions and limits, and determining user access based on their membership in these groups and the applicable limits at runtime.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If hierarchical role-based systems are used to manage financial services entitlements, then user authorization and permission management are enabled, but effective control and enforcement of cumulative limits across functions and objects cannot be maintained

Engineering Contradiction:

Improvelimit check controlVSAvoidflexibility of limit checks

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system segments limit checks into multiple dimensions including function-based limits, object-based limits, user-based limits, and cumulative limits across different time periods. Each dimension can be independently configured and enforced, allowing the system to maintain reliable control while adapting to various financial services scenarios.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces multiple dimensions for limit checks beyond traditional single-dimension approaches. Limits are enforced across function dimensions, object dimensions, user dimensions, and time period dimensions simultaneously. This multi-dimensional approach enables both reliable control and versatile adaptation to different business requirements.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

2Reliability

If multiple limit checks are implemented across functions, objects, and time periods, then comprehensive control is achieved, but system complexity increases

Engineering Contradiction:

Improvecomprehensive limit enforcementVSAvoidsystem structure complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system merges multiple limit check mechanisms into a unified entitlement system that simultaneously handles function-based limits, object-based limits, user-based limits, and cumulative limits. This consolidation reduces system complexity while maintaining comprehensive control through integrated limit enforcement across all dimensions.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The entitlement system is designed as a universal platform that can enforce various types of limits (function limits, object limits, cumulative limits) through a common framework. This multi-functional design simplifies the system structure by providing a single mechanism that handles diverse limit check requirements rather than separate systems for each limit type.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Ease of operation

If hierarchical entitlement structure with inheritance is implemented, then permission management becomes more organized, but determining user entitlements at runtime becomes more complex

Engineering Contradiction:

Improvepermission management organizationVSAvoidruntime entitlement determination time

Core Design Contradiction:

Ease of operationVSLoss of time

Solution Approach 1:

The system performs preliminary computation of user entitlements by leveraging the hierarchical inheritance structure to pre-determine applicable limits and permissions. By caching and pre-processing entitlement information based on the hierarchy, the system reduces runtime determination time while maintaining organized permission management through the hierarchical structure.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS8478668B2Hierarchical entitlement system with integrated inheritance and limit checks

Publication Date: 2013.07.02 SYBASE INC

AI summary

A hierarchical entitlement system with integrated inheritance and limit checks is described. In one embodiment, for example, a computer-implemented method is described for specifying and enforcing entitlements for performance of financial transactions, the method comprises steps of: providing a hierarchical entitlement structure with inheritance for specifying entitlements for performing financial transactions; receiving user input for defining a plurality of entitlement groups of the hierarchical entitlement structure, wherein each entitlement group has specified permissions to perform financial transactions, limits on performance of the financial transactions, and membership of each user; in response to a particular user request to perform a financial transaction at runtime, identifying the particular user's membership in a certain entitlement group; and determining whether to allow the particular user to perform the financial transaction based on permissions and limits of the hierarchical entitlement structure applicable to the particular user's performance of the financial transaction.