File Permission Set Indexing for Principal Access Queries
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data management systems face challenges in efficiently indexing and querying principals associated with file systems, particularly in large-scale environments, leading to high complexity and resource consumption.
Innovation Solution
A data management system (DMS) employs a technique that assigns unique values to permission sets associated with files, creating mappings between files and principals, allowing for efficient indexing and querying by leveraging the reduced quantity of unique permission sets generated by humans.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional indexing methods are used to manage file systems with large quantities of files and principals, then complete access control information can be maintained, but memory consumption and processing complexity increase significantly
Solution Approach 1:
The patent extracts only the necessary permission information from the complete access control data structure. Instead of indexing all file-principal combinations, the system extracts and indexes only the permission sets that actually grant access, thereby reducing the indexing complexity while maintaining accurate access control information.
Solution Approach 2:
The patent segments the access control information into discrete permission sets. Each permission set is independently indexed and can be queried separately, allowing the system to manage large quantities of files and principals by processing smaller, manageable units of permission information rather than the entire access control matrix at once.
2Reliability
If traditional indexing methods are used to manage file systems with large quantities of files and principals, then complete access control information can be maintained, but memory consumption increases significantly
Solution Approach 1:
The patent extracts only the essential permission granting information from the complete access control data. By taking out only the necessary permission sets rather than storing all access control relationships, the system reduces memory consumption while maintaining the ability to accurately determine access control information.
Solution Approach 2:
The patent creates a simplified copy of the access control information in the form of indexed permission sets. This copy contains only the necessary permission data needed for access control determinations, reducing memory requirements compared to storing the complete access control matrix while preserving the essential access control functionality.
3Reliability
If traditional indexing methods are used to manage file systems with large quantities of files and principals, then complete access control information can be maintained, but processing requirements increase
Solution Approach 1:
The patent segments the access control information into discrete, indexable permission sets. This segmentation allows the system to process queries by searching through smaller permission set units rather than scanning the entire access control matrix, significantly improving query processing efficiency while maintaining accurate access control determinations.
Solution Approach 2:
The patent performs preliminary indexing of permission sets before actual access control queries are executed. By pre-processing and organizing permission information into an indexed structure, the system reduces the processing requirements during query execution, as the indexed permission sets can be quickly searched rather than processing the complete access control data in real-time.
Data Source
AI summary
Methods, systems, and devices for data management are described. A data management system (DMS) may obtain a snapshot of a file system that includes multiple files and permission sets associated with the files. A permission may indicate one or more access approvals for associated principals. The DMS may assign unique values to the permission sets, where each unique value identifies a respective permission set. The DMS may store a first mapping between the files and the unique values based on the permission sets that correspond to the files. The DMS may store a second mapping between the principals and the unique values based on an evaluation of the permission sets. The DMS may use the first mapping and the second mapping to identify, for a principal, a set of files to which the principal has access.