Access Permission Mapping for Conflict-Free Data Migration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for migrating data and user accounts between systems face challenges in identifying and resolving access permission conflicts, which are often manual, time-consuming, and prone to errors due to differences in capabilities between source and target systems.

Innovation Solution

A method and system that utilize a set of mappings to translate access permissions from a source system to a target system, employing conflict resolution strategies such as warn-and-skip, expansive, and restrictive to automatically identify and resolve permission conflicts during data migration.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If manual processes are used to identify and resolve permission conflicts during data migration, then flexibility in handling complex permission scenarios is improved, but time consumption and error rates increase

Engineering Contradiction:
Improveflexibility in handling complex permission scenariosVSAvoidtime consumption
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The system performs self-service by automatically detecting permission conflicts during data migration and applying resolution strategies without requiring manual intervention. The conflict detection module identifies conflicts between source and target system permissions, and the resolution module automatically resolves them using predefined strategies (restrictive, expansive, or warn-and-skip), enabling the system to handle complex permission scenarios autonomously and reduce time consumption.

Inventive Principle:
Principle #25Self-service

2Ease of operation

If manual processes are used to identify and resolve permission conflicts during data migration, then control over permission decisions is improved, but error rates increase

Engineering Contradiction:
Improvecontrol over permission decisionsVSAvoiderror rates
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system implements feedback mechanisms where the conflict detection module continuously monitors permission assignments during migration, identifies conflicts, and provides information to the resolution module. The resolution module applies strategies and feeds back the results, allowing for automated control while maintaining reliability through systematic conflict resolution rather than manual processes that are prone to errors.

Inventive Principle:
Principle #23Feedback

3Loss of time

If automated conflict resolution strategies are applied, then time consumption is reduced, but complexity of the migration system increases

Engineering Contradiction:
Improvetime consumptionVSAvoidcomplexity of the migration system
Core Design Contradiction:
Loss of timeVSDevice complexity

Solution Approach 1:

The migration system is segmented into distinct functional modules: a conflict detection module that identifies permission conflicts, a resolution module that applies resolution strategies, and a migration execution module that performs the actual data migration. This segmentation allows the system to automate conflict resolution and reduce time consumption while managing complexity through modular design, where each module has a specific responsibility.

Inventive Principle:
Principle #1Segmentation

4Adaptability or versatility

If multiple conflict resolution strategies are provided, then adaptability to different permission scenarios is improved, but device complexity increases

Engineering Contradiction:
Improveadaptability to different permission scenariosVSAvoiddevice complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system provides dynamic conflict resolution by offering multiple resolution strategies (restrictive, expansive, and warn-and-skip) that can be selected based on the specific permission scenario. The resolution module dynamically applies the appropriate strategy depending on the type of conflict detected, enabling adaptability to different permission scenarios while managing complexity through a unified resolution framework that handles multiple strategies.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS12585805B2Identifying and resolving conflicts in access permissions during migration of data and user accounts
Publication Date: 2026.03.24 BOX INC
  • US12585805B2 patent drawing
  • US12585805B2 patent drawing
  • US12585805B2 patent drawing

AI summary

Embodiments provide for identifying and resolving conflicts in access permissions migrated data by receiving a set of mappings including path mappings of a hierarchy of data objects on the source system to locations on the target system for migrated data objects. Based on the received set of mappings, permissions controlling access to data objects of the hierarchy of data objects on the source system can be translated to permissions controlling access to the migrated data objects on the target system for one or more user accounts on the target system. One or more conflicts can be detected between permissions on the source system and permissions on the target system. A conflict resolution strategy can be selected from a plurality of conflict resolution strategies and the selected conflict resolution strategy can be applied to the permissions controlling access to the migrated data objects on the target system.