Policy Composer for Natural Language Access Control Translation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The challenge lies in automatically translating free-form natural language policy text into logical access control policy code, as non-technical information security professionals write policies that need to be translated by technical cybersecurity engineers, and existing methods lack an efficient automated solution.

Innovation Solution

A policy composer system that utilizes natural language processing, an attribute dictionary, and a natural language policy set to translate natural language policy text into logical access control code, specifically in XACML or NGAC formats, by identifying attributes and generating well-formed rules.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If manual translation of natural language policy text to access control code is performed, then translation accuracy can be maintained, but time consumption and labor costs increase significantly

Engineering Contradiction:

Improvetranslation accuracyVSAvoidtranslation time

Core Design Contradiction:

Measurement precisionVSLoss of time

Solution Approach 1:

The system enables self-service automatic translation through NLP technology. The policy translation system automatically analyzes natural language policy text, extracts key elements, and generates access control code without requiring manual intervention by security engineers, thus resolving the contradiction between maintaining accuracy and reducing time consumption

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces the mechanical manual translation process with an automated computational system. The NLP-based policy translation system substitutes human engineers' manual work with algorithmic processing, achieving both speed and accuracy through automated text analysis and code generation

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If automated translation using basic NLP is implemented, then translation speed increases, but translation accuracy and rule correctness deteriorate

Engineering Contradiction:

Improvetranslation speedVSAvoidtranslation accuracy

Core Design Contradiction:

ProductivityVSMeasurement precision

Solution Approach 1:

The translation process is segmented into distinct stages: text preprocessing, policy rule identification, attribute extraction, and code generation. Each stage handles specific tasks with specialized algorithms, improving overall accuracy while maintaining speed through divided computational responsibilities

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces intermediate representations and validation layers between raw natural language text and final access control code. These intermediaries include policy rule templates, attribute dictionaries, and validation mechanisms that ensure translation accuracy while preserving automated processing speed

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If a comprehensive attribute dictionary and policy set are created, then translation quality improves, but system complexity increases

Engineering Contradiction:

Improvetranslation qualityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The attribute dictionary and policy set serve multiple functions: they store vocabulary mappings, define attribute relationships, provide translation templates, and validate generated code. This multi-functionality justifies the initial setup complexity by enabling consistent, high-quality translations across diverse policy scenarios

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system performs preliminary actions by pre-building comprehensive attribute dictionaries and policy sets before actual translation tasks. This upfront investment in creating structured knowledge bases enables faster and more accurate translations during operation, resolving the contradiction between quality and complexity

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS10606957B1Method and system for translating natural language policy to logical access control policy

Publication Date: 2020.03.31 GOOD MICHAEL

AI summary

Natural language policy text is translated into logical access control policy code with a policy composer that receives natural language policy text, an attribute dictionary connected to the policy composer to define attributes and their logical access control policy equivalents. A natural language policy set is connected to the policy composer and includes samples of natural language policy rules and their logical access control policy equivalents. The policy composer uses natural language processing, the attribute dictionary and the natural language policy set to translate the natural language policy text into logical access control code.