Identity Governance NPR Cube Model for Policy Deviation Reduction

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current identity and access governance systems are inadequate in managing and evaluating relationships between business needs, access policies, and decision-making processes, leading to deviations and increased costs due to their reliance on a two-dimensional model that fails to effectively address business expectations and digital security requirements.

Innovation Solution

A three-dimensional NPR cube model is introduced, incorporating business needs, access policies, and resolution axes to improve identity governance and administration by classifying and analyzing data associated with digital asset access requests, enabling organizations to adjust policies and reduce risks and costs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If a two-dimensional four quadrant model is used for analyzing access requests, then the analysis can be performed with simple True/False and Positive/Negative definitions, but the model is inadequate and ineffective for managing, evaluating and improving identity governance and administration

Engineering Contradiction:
Improvemodel complexityVSAvoideffectiveness of access governance analysis
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent transitions from a two-dimensional four quadrant model to a three-dimensional eight octant model by adding the business need dimension. This dimensional expansion allows the system to evaluate access requests across three axes: True/False (access policy satisfaction), Positive/Negative (access decision), and Yes/No (business need), thereby resolving the inadequacy of the prior art model while maintaining analytical effectiveness

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Adaptability or versatility

If access policies are developed to correspond to business expectations, digital security rules and regulations, and people-centric principles, then policy alignment is improved, but deviations and costs of managing and enforcing policies increase

Engineering Contradiction:
Improvepolicy alignment with business needsVSAvoidcost of managing and enforcing policies
Core Design Contradiction:
Adaptability or versatilityVSLoss of energy

Solution Approach 1:

The patent implements feedback mechanisms by continuously monitoring access requests across the three-dimensional model and providing insights into policy performance. The system evaluates whether access decisions align with business needs and generates recommendations for policy adjustments, enabling organizations to reduce deviations and lower the costs of managing and enforcing policies while maintaining alignment

Inventive Principle:
Principle #23Feedback

3Reliability

If the three-dimensional NPR cube model is implemented to add business need measurement, then identity governance maturity is enhanced, but the complexity of data classification and analysis increases

Engineering Contradiction:
Improveidentity governance maturityVSAvoiddata classification complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies segmentation by dividing the access request data into eight distinct octants based on the three-dimensional classification (True/False, Positive/Negative, Yes/No). This segmentation approach organizes complex data into manageable categories, making it easier to analyze and interpret while enhancing identity governance maturity through comprehensive evaluation

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS12260417B2Method for managing, evaluating and improving identity governance and administration
Publication Date: 2025.03.25 COSTIDITY INC
  • US12260417B2 patent drawing
  • US12260417B2 patent drawing
  • US12260417B2 patent drawing

AI summary

A system and related methods are disclosed for managing, evaluating and improving identity governance and administration. The system is configured to execute a method, which includes receiving, by a computing system, data associated with the identity governance and administration, classifying, by a computing system, the data associated with the identity governance and administration according to one or more rules, generating, by a computing system, a three-dimensional model using the classified data associated with the identity governance and administration, performing, by a computing system, a statistical analysis, and optionally displaying, by a computing system, the three-dimensional model or results of the statistical analysis, or both.