Precomputed Access Control Expressions for PLM Data Retrieval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current product lifecycle management (PLM) systems face performance and scalability issues in data retrieval and access control, particularly when dealing with configured product structures like Bill of Materials (BOM), as existing algorithms are slow and inefficient in validating user privileges for accessing BOM lines.
Innovation Solution
The method involves pre-calculating access control expressions for persistent data objects and storing them as string-representation Boolean expressions, allowing for set-based evaluation and caching to improve performance, thereby reducing the need for runtime rule evaluation and enhancing access control efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If runtime rule evaluation is performed for each data object access, then access control can be dynamically enforced, but system performance deteriorates due to repeated computations
Solution Approach 1:
The patent pre-computes access control expressions and stores them as string-representation Boolean expressions before actual data access occurs. This preliminary computation eliminates the need for repeated rule evaluations during runtime data retrieval operations, significantly improving performance while maintaining access control enforcement through the pre-computed expressions.
2Reliability
If detailed access control rules are evaluated for each data object, then secure data access is ensured, but processing time increases
Solution Approach 1:
Access control rules are pre-processed and stored as string-representation Boolean expressions before data access operations. This allows the system to retrieve pre-computed access control information instantly during data access, eliminating time-consuming runtime rule evaluations while maintaining secure data access through the pre-stored expressions.
Solution Approach 2:
The patent creates string-representation copies of access control expressions that can be rapidly retrieved and evaluated without re-processing the original complex rules. These string representations serve as efficient copies that preserve access control logic while enabling fast retrieval and evaluation during data access operations.
3Reliability
If access control expressions are computed for each persistent data object, then comprehensive access control is achieved, but system complexity increases
Solution Approach 1:
The patent generates string-representation copies of access control expressions for each persistent data object, storing them in a manner that enables efficient retrieval. This approach achieves comprehensive access control coverage by pre-computing expressions for all objects while reducing system complexity through the use of standardized string representations that simplify storage and retrieval operations.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods for product data management and corresponding systems (100) and computer-readable mediums (126). A method includes receiving (305) a hierarchical data structure (210) that includes a plurality of structure lines (242) referencing persistent data objects (220)and receiving (310) metadata (225) corresponding to persistent data objects (220) referenced by the hierarchical data structure (225). The method includes computing (320) an access control expression (246) corresponding to each persistent object (220) according to the metadata (225), wherein the access control expressions (246) are string-representation Boolean expressions, and storing (325) the access control expressions (246).