Permission Taxonomy Translation for Cross-Environment Data Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing permission taxonomy management techniques fail to provide compatibility and fidelity when data sets from different computing environments are joined, as they have distinct permission models audited for compliance in separate environments.
Innovation Solution
A method and system that transforms disparate permission policies from different computing platforms into a standardized and consistent policy taxonomy by tagging data and metadata, determining rules, generating standard policies, and enforcing access controls to ensure compatibility across environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data sets from different computing environments are joined together, then data integration and sharing are improved, but permission model compatibility and compliance fidelity deteriorate
Solution Approach 1:
The patent introduces an intermediary permission taxonomy layer that sits between disparate permission models from different computing environments. This intermediary taxonomy translates and reconciles permission policies from source environments to target environments, enabling data integration while maintaining compliance fidelity. The intermediary acts as a mediator that prevents direct conflicts between incompatible permission models.
Solution Approach 2:
The patent transforms permission policies by changing their parameter representation from environment-specific formats to a standardized taxonomy format. This parameter transformation enables compatibility across different computing environments while preserving the semantic meaning and compliance requirements of original permission models.
2Reliability
If environment-specific permission models are maintained separately, then compliance fidelity is improved, but data sharing and integration capability deteriorate
Solution Approach 1:
The patent creates a universal permission taxonomy that can serve multiple computing environments simultaneously. This universal taxonomy maintains the compliance requirements of each environment-specific model while enabling cross-environment data sharing. The same taxonomy structure can enforce different permission policies for different environments, providing multi-functionality.
3Ease of manufacture
If conventional permission taxonomy management techniques are used, then implementation simplicity is improved, but compatibility and fidelity across multiple environments deteriorate
Solution Approach 1:
The patent segments the permission management process into distinct components: source environment permission models, intermediary permission taxonomy translation layer, and target environment enforcement layer. This segmentation allows each component to be developed and maintained independently, improving implementability while achieving cross-environment compatibility through the coordinated interaction of segments.
Data Source
AI summary
A method for facilitating a permission management pipeline to provide policy taxonomy governance is disclosed. The method includes receiving data sets that are shared from a producer application, the data sets including data, corresponding metadata, and producer policy logic; tagging the data and the corresponding metadata for each of the data sets to identify raw data and permission schema data; determining, by using a model, declarative rules by parsing the producer policy logic; generating, by using the model, standard policies based on the determined declarative rules, the standard policies corresponding to executable standard entitlement policies; executing the generated standard policies by using a policy enforcement function, the tagged data, and the tagged corresponding metadata; and generating, based on a result of the executing, producer permissions that are paired with the data sets, the producer permissions including an entity-group access-control list of permissions that is associated with the data sets.