Host Access Permission Using Risk-Scored Security Assessment

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for determining access permissions of hosts in storage sharing/exporting fail to accurately assess the risk levels associated with different types of access, leading to potential security vulnerabilities and compromised data security.

Innovation Solution

A method and system that determines access permissions based on calculating a risk score for a host using security information from a management server, comparing it with a risk threshold specific to the type of access, and granting or denying access accordingly.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional access permission methods are used, then access control is implemented, but security risks are not accurately assessed

Engineering Contradiction:

Improvedata securityVSAvoidrisk assessment accuracy

Core Design Contradiction:

ReliabilityVSMeasurement precision

Solution Approach 1:

The patent changes the parameter of risk assessment from qualitative default permissions to quantitative risk scores. By calculating risk scores based on multiple security parameters (vulnerability counts, antivirus status, patch levels) and comparing them against dynamic thresholds, the system achieves precise measurement of security risks while maintaining reliable data protection

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The patent replaces the mechanical system of static access control lists with an automated risk assessment mechanism. The storage server automatically collects security information, calculates risk scores, and dynamically adjusts access permissions based on real-time security status, eliminating manual configuration and improving both accuracy and reliability

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If strict access control is implemented, then data security is improved, but access efficiency is reduced

Engineering Contradiction:

Improvedata securityVSAvoidaccess efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent implements dynamic access control where permissions are not fixed but adjust based on real-time risk assessments. The storage server continuously monitors security parameters and automatically modifies access levels, allowing strict control when risks are high and more permissive access when risks are low, thereby maintaining both security and efficiency

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system performs self-service by automatically collecting security information, calculating risk scores, and adjusting permissions without manual intervention. This automated risk-based access control eliminates the need for administrators to manually review each access request while maintaining strict security controls, thus improving access efficiency without compromising data security

Inventive Principle:

Principle #25Self-service

3Ease of operation

If default access permissions are set for all hosts, then ease of operation is improved, but security precision is worsened

Engineering Contradiction:

Improvepermission configurationVSAvoidrisk differentiation

Core Design Contradiction:

Ease of operationVSMeasurement precision

Solution Approach 1:

The patent applies local quality by customizing access permissions for each host based on its specific security profile. Instead of uniform default permissions, the system calculates individual risk scores for each host considering its unique security parameters (specific vulnerabilities, antivirus status, patch levels) and assigns differentiated access levels, achieving both ease of operation and precise risk differentiation

Inventive Principle:

Principle #3Local quality

4Reliability

If comprehensive security checks are performed, then security reliability is improved, but system complexity increases

Engineering Contradiction:

Improvesecurity assessmentVSAvoidaccess control system

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the security assessment process into distinct modules: information collection module, risk score calculation module, and permission determination module. Each module handles specific tasks (collecting security parameters, calculating risk scores based on weighted parameters, determining access permissions), making the comprehensive security system manageable and maintainable while achieving high reliability

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS12519819B2Method, device, and computer program product for determining access permission of host

Publication Date: 2026.01.06 DELL PROD LP

AI summary

The described technology relates to determining an access permission of a host. An example method includes performing an access check by a storage server in response to receiving an access request from the host and acquiring security information associated with the host from a management server by the storage server in response to passing the access check. In addition, the method can include determining a risk score of the host by the storage server based on the security information and determining an access permission of the host by the storage server based on the risk score of the host and a risk threshold of the type of access. Beneficially, an accurate assessment of the risk of access of the host is achieved, which avoids security problems caused by the security risk of the host, while allowing the host to gain maximum access permission without compromising overall security.