Permissions Analysis Module for Data System Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The management of permissions and security access in complex computing and data systems has become increasingly complex due to the multiplication of resources and users, requiring efficient and flexible solutions to determine and manage permissions effectively.

Innovation Solution

An electronic permissions system that uses a permissions analysis module to traverse and analyze complex data structures, such as mathematical graphs, to determine permissions and automatically generate user interfaces, reducing processing and memory requirements while allowing non-technical users to create outputs like user interfaces and reports.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If traditional permission management systems are used in complex data systems, then comprehensive permission coverage is achieved, but system complexity and processing requirements increase significantly

Engineering Contradiction:
Improvepermission coverageVSAvoidsystem complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces a permissions analysis module as an intermediary component that sits between the complex data system and the permission determination logic. This module traverses resource data hierarchies and accessor data hierarchies to resolve permissions, isolating the complexity from the core system and enabling comprehensive permission coverage without proportionally increasing overall system complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments permission determination into discrete components: resource data hierarchies, accessor data hierarchies, and a permissions analysis module. This segmentation allows each component to be independently managed and optimized, reducing the complexity burden on any single element while maintaining comprehensive permission coverage across the entire system.

Inventive Principle:
Principle #1Segmentation

2Measurement precision

If comprehensive permission analysis is performed on complex data structures, then accurate permission determination is achieved, but processing time and memory requirements increase

Engineering Contradiction:
Improvepermission determination accuracyVSAvoidprocessing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent performs preliminary traversal and analysis of resource data hierarchies and accessor data hierarchies before final permission determination. By pre-processing the hierarchical structures to identify relevant paths and relationships, the system reduces the computational burden during actual permission checks, thereby decreasing processing time while maintaining accurate determination.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent extracts and isolates the essential permission determination logic from the complex data structures through the permissions analysis module. This extraction allows the module to process only the necessary hierarchical paths and relationships, reducing unnecessary processing time and memory consumption while preserving the accuracy of permission determination.

Inventive Principle:
Principle #2Taking out (Extraction)

3Adaptability or versatility

If technical users create user interfaces and reports, then customized outputs are achieved, but programming knowledge and technical skills are required

Engineering Contradiction:
Improveoutput customizationVSAvoiduser accessibility
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The patent enables the system to serve itself by automatically generating user interfaces and reports based on the traversed hierarchical data. The permissions analysis module can autonomously create customized outputs without requiring manual programming or technical expertise from users, thereby maintaining output customization while significantly improving ease of operation for non-technical users.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10686840B1System and architecture for electronic permissions and security policies for resources in a data system
Publication Date: 2020.06.16 ADDEPAR INC
  • US10686840B1 patent drawing
  • US10686840B1 patent drawing
  • US10686840B1 patent drawing

AI summary

An electronic permissions and security system are disclosed which may be used to determine permissions and policies for resources in a complex multi-dimensional data system. Analysis of resource data hierarchies and/or accessor data hierarchies using the permissions computing systems and methods discussed herein may provide efficient and flexible permissions analysis, determination, and management. The electronic permissions system may include for example, a permissions analysis module or component configured to access, traverse and/or analyze a resource hierarchy and/or an accessor hierarchy to determine permissions with respect to a resource. Permissions may be defined according to various policies which may include specific actions allowed or disallowed for the policy. Specific actions within a policy may also be organized hierarchically such that one particular grant of one permission may imply granting of another permission.