Online Service Provider Permission Digital Rules for Relationship Instance Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computer network systems face inefficiencies in determining whether a dataset should be used to establish a relationship instance between a primary and secondary entity, as they require extensive processing and resource allocation, which can be resource-intensive and lead to increased latency.
Innovation Solution
Implementing permission digital rules (PDRs) and resource digital rules (RDRs) within an online service provider (OSP) to evaluate and manage dataset usage, allowing the OSP to quickly determine if a dataset is excluded based on predefined rules, thereby reducing the need for extensive processing and resource allocation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the primary entity determines whether a secondary entity can enter a relationship instance using permission digital rules, then the primary entity can control access to relationship instances, but the primary entity consumes significant processing resources and time
Solution Approach 1:
The patent extracts the permission evaluation function from the primary entity and relocates it to the online service provider. The OSP maintains and evaluates permission digital rules independently, returning only evaluation results to the primary entity. This extraction eliminates the need for the primary entity to perform complex rule matching, resolving the contradiction between maintaining reliable access control and preserving processing efficiency.
Solution Approach 2:
The online service provider acts as an intermediary between the primary entity and secondary entity for permission evaluation. Instead of the primary entity directly evaluating permission rules against secondary entity data, the OSP mediates this process by receiving the secondary entity identifier, performing the rule evaluation, and returning the result. This intermediary approach maintains access control reliability while freeing up the primary entity's processing resources.
2Measurement precision
If the system applies multiple permission digital rules to evaluate each potential relationship instance, then the system can accurately determine dataset exclusion, but the evaluation process becomes slower and more resource-intensive
Solution Approach 1:
The system performs preliminary actions by pre-compiling permission digital rules into efficient evaluation structures and pre-loading them into the OSP. The rules are prepared in advance with optimized data structures that enable rapid matching during runtime. This preliminary preparation allows the system to maintain high evaluation accuracy while significantly reducing the time required for actual rule evaluation during relationship instance processing.
Solution Approach 2:
The patent transforms the permission digital rules from a complex textual format into optimized internal representations with changed parameters. The rules are converted into structured data formats that enable efficient computational evaluation, changing the parameter representation to allow for faster processing. This parameter transformation maintains the semantic accuracy of rule evaluation while reducing the computational time required.
3Reliability
If the primary entity performs comprehensive evaluation of permission digital rules and resource digital rules, then the system can make accurate resource allocation decisions, but the system requires more capable and expensive hardware
Solution Approach 1:
The patent segments the evaluation system into two independent parts: the primary entity that initiates relationship requests, and the online service provider that performs comprehensive rule evaluation. By dividing the system architecture, the computationally intensive rule evaluation is performed on the OSP's infrastructure, allowing the primary entity to use less capable hardware while maintaining accurate resource allocation decisions through the OSP's evaluation results.
Data Source
AI summary
Systems and methods electronically determine whether a dataset is permitted or excluded based on permission digital rules. Primary entities often are required, or choose to, exclude proposed relationship instances with secondary entities. The systems and methods described herein allow permission digital rules to be defined and applied to datasets obtained from secondary entities relating to a proposed relationship instance with the primary entity, and permit or exclude a resource from being produced for the dataset based on the permission digital rules.


