On-the-fly Content-Based Access Control via Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional contents-based access control systems require storing a copy of data before making access decisions, which is inefficient and costly, especially in streaming communications, as they need to analyze the entire data before allowing or blocking transfers, leading to performance issues and storage burdens.
Innovation Solution
An access control system that applies contents-based policies by scanning and encrypting data on-the-fly as it is transferred, using a random encryption key, allowing direct forwarding of data to the recipient without storage, and revealing the key only if the transfer is allowed, thus eliminating the need for storing the entire data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional contents-based access control systems store a copy of data before making access decisions, then access control decisions can be made based on data contents, but storage requirements increase and performance decreases
Solution Approach 1:
The patent extracts the storage function from the access control system by implementing a trusted recipient model. Instead of storing data in the SRM, the system assumes the recipient will store and securely delete the data after use. This removes the storage burden from the access control system while maintaining contents-based access control capabilities.
Solution Approach 2:
The patent introduces encryption as an intermediary mechanism between the access control decision and data transfer. Data is encrypted during transfer, and the encryption key is selectively revealed to the recipient based on access control decisions. This allows contents-based control without requiring the SRM to store the actual data.
2Reliability
If conventional systems analyze entire data before allowing transfer, then security policies can be enforced, but transfer speed decreases and productivity is reduced
Solution Approach 1:
The patent performs preliminary encryption of data as it is transferred, rather than waiting to analyze the entire data stream. The encryption key is generated and applied during the transfer process itself, allowing security measures to be implemented without blocking the transfer pipeline. This enables parallel processing of encryption and analysis operations.
Solution Approach 2:
The patent implements dynamic access control where decisions are made in real-time during data transfer rather than requiring complete data analysis beforehand. The system can make incremental security decisions as data flows through the SRM, adjusting control actions dynamically based on what is analyzed so far in the data stream.
3Reliability
If the SRM stores data copies for contents-based analysis, then comprehensive security checking is possible, but system complexity and resource consumption increase
Solution Approach 1:
The patent makes the recipient responsible for its own data storage and security deletion functions. The trusted recipient model assumes the recipient will store data securely during processing and automatically delete it after use. This shifts the storage burden from the SRM to the recipient, reducing SRM complexity while maintaining security checking capabilities.
4Reliability
If data is stored for later access control decisions, then policy enforcement is thorough, but time delay increases and response time worsens
Solution Approach 1:
The patent maintains continuous data transfer and processing operations without interruption for storage and analysis. Encryption occurs during the transfer stream itself, and access control decisions are made in real-time as data flows through the SRM. This eliminates the stop-start nature of storing then analyzing, maintaining continuous useful action throughout the data handling process.
Data Source
AI summary
An access control system applies contents-based policies to data that is being transferred. This transfer can be between different computers, different operating systems on a single computer, different applications within on the same operating system, or different parts of the same operating system, for example. Data is scanned at a scan engine associated with a security reference monitor (SRM) as the data is being transmitted, on-the-fly. The data is forwarded directly to the recipient, so the data is not stored at the SRM. The data is encrypted at the SRM as it comes by, and the key is revealed to the recipient if it is subsequently determined that the transfer is allowed.