Messaging Destination Access Control via Message Selectors
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing messaging systems face challenges in effectively controlling access to message destinations, as current access control mechanisms can be easily circumvented, leading to unauthorized access to messages.
Innovation Solution
A method and computer program product that select a destination for storing messages with associated message properties, and associate each message requestor with a set of message selectors to determine and enforce access permissions based on these properties, ensuring only authorized messages are accessed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional access control mechanisms are used for message destinations, then implementation simplicity is maintained, but security against unauthorized access deteriorates
Solution Approach 1:
The patent segments access control into multiple independent components: message selectors are associated with requestors, message properties are attached to messages, and the matching logic is separated from the destination itself. This segmentation allows each component to be managed independently, improving security while maintaining manageable complexity.
Solution Approach 2:
The patent applies preliminary action by pre-associating message selectors with requestors before access attempts occur. The system pre-defines which message properties each requestor can access, and this pre-established association is automatically applied during message access operations, eliminating the need for complex runtime authorization decisions.
2Measurement precision
If message properties are tracked and enforced for each requestor, then access control precision is improved, but processing overhead increases
Solution Approach 1:
The patent implements self-service by having the message selector matching logic automatically performed by the system without requiring manual intervention or complex external authorization services. The pre-associated message selectors self-evaluate against message properties, enabling precise access control through automated, efficient matching operations.
Solution Approach 2:
The patent changes parameters by transforming the access control approach from checking user permissions to matching message selectors with message properties. This parameter transformation enables precise control while optimizing processing speed, as the matching operation works directly with structured message properties rather than complex permission hierarchies.
Data Source
AI summary
Providing controlled access for a destination in a messaging system includes: selecting a destination for storing messages in a messaging system, one or more of the messages comprising one or more message properties; associating each of a set of message requestors with a set of message selectors; and in response to an access request for the destination from a message requestor, determining the set of said message selectors associated with the message requestor and using the identified set of message selectors to check against messages on the destination comprising a corresponding set of message properties for providing a response to the access request.