Location-Based Access Control for Document Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file storage systems face corruption of access control policies when users access and modify documents, leading to potential unauthorized access and loss of control over access privileges.
Innovation Solution
Implementing location-based access control by assigning a unique identifier to documents based on their original storage location, ensuring that access is only granted when the document is accessed from an authorized location, and maintaining consistent access control policies even when documents are moved or copied.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control information is encrypted into the document and assigned to a set of users, then users having assigned access rights can access the document according to the assigned rights, but the access control policy may be corrupted when the user saves the document to a different location and the document is re-encrypted
Solution Approach 1:
The access control system is segmented into location-specific policies. Each location (folder) has its own access control policy, and documents are associated with their original location. When a document is moved or copied, the system checks whether the new location's policy matches the original location's policy, preventing unauthorized access control changes while allowing document mobility.
Solution Approach 2:
The patent introduces an intermediary mechanism that compares access control policies between the original document location and the new location. This intermediary check prevents direct corruption of access control information during document moves or copies, ensuring policy integrity while allowing flexible document management.
2Ease of operation
If the document is re-encrypted when saved to a different location, then the document can be accessed at the new location, but the original access control information may be changed or stripped
Solution Approach 1:
The system performs preliminary verification before allowing document moves or copies. It checks whether the access control policy at the destination location matches the original location's policy before permitting the operation. This preliminary check prevents access control information from being changed or stripped during the move/copy process.
Solution Approach 2:
The patent implements a feedback mechanism where the system continuously monitors and compares access control policies during document operations. When a document is moved or copied, the system provides feedback by verifying whether the new location's policy aligns with the original, and only permits the operation if the policies match, thereby preserving access control information integrity.
Data Source
AI summary
A method and apparatus for location-based access control applies a location-based identifier to a document, wherein the location-based identifier indicates an original storage location of the document. The original storage location is an authorized node having access privileges specific to the document. In response to the document being moved or copied, an access control engine compares a current location of the document to the original storage location and denies access when there is a discrepancy. When the document is moved consistent with an access control policy, such as when an administrator moves the document, an original storage location identifier is changed consistent with a new location. The document is only accessible when accessed from an authorized location. The locations may be referred to as access nodes, wherein each access node corresponds to a folder.