Multi-Tag Resource Access Control with Conflict Resolution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems face conflicts due to tag-based decision-making, leading to inconsistent access permissions when resources have multiple conflicting tags.
Innovation Solution
A method and system that utilize a computing system to retrieve multiple resource tags associated with a requested resource, compare their corresponding access labels, apply conflict resolution rules, and determine access based on these labels, including options like selecting the most permissive or protective rule, sending requests to humans or AI systems for decision, or using machine-learning models.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple resource tags are used to represent groups of resources with similar characteristics, then access control versatility is improved, but access decision consistency deteriorates when conflicts between tags occur
Solution Approach 1:
The system changes the parameter of tag evaluation by introducing weighted scores and priority levels. Each tag is assigned a weight and priority, allowing the system to resolve conflicts by selecting tags with higher weights or priorities when multiple conflicting tags are present, thus maintaining both versatility and consistency
Solution Approach 2:
The system introduces an intermediary conflict resolution mechanism that mediates between conflicting tags. This intermediary layer evaluates multiple tags, resolves conflicts through predefined rules or machine learning models, and produces a single consistent access decision, thereby maintaining reliability while preserving the versatility of multiple tags
2Reliability
If a blacklist system is used to control access by denying resources on the list, then security is improved, but system complexity increases when multiple conflicting tags are involved
Solution Approach 1:
The system performs preliminary actions by pre-assigning weights and priorities to tags, and pre-defining conflict resolution rules. This preliminary configuration allows the system to automatically resolve conflicts without requiring complex real-time analysis, thereby maintaining security while reducing operational complexity
Solution Approach 2:
The system implements self-service through automated conflict resolution using machine learning models and predefined rules. The system autonomously evaluates conflicting tags and makes access decisions without requiring manual intervention or complex administrative overhead, maintaining security while simplifying system management
Data Source
AI summary
Methods and computing systems for controlling access to a resource are disclosed. A request is received to access a resource associated with a set of resource tags, each being associated with an access label and a corresponding access rule. The access rules include allow and block. For each resource tag, a corresponding access label is retrieved. It is determined if all of the corresponding ones of the set of access labels are the same. Access to the resource is controlled according to one of the set of access rules corresponding to the corresponding one of the set of access labels if all of the corresponding ones of the set of access labels are the same. Access to the resource is controlled based on a conflict resolution rule if all of the corresponding ones of the set of access labels are not the same.