Query URL Access Control Without Data Duplication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data storage and access control systems waste computing resources by duplicating data when granting access to unauthorized users, as they require creating separate data resources with restricted access, leading to inefficiencies in data storage and hardware/software costs.
Innovation Solution
Implementing a system where a first user generates a URL associated with a query to share data access, allowing privileged users to control access levels through queries, thereby filtering out sensitive information without duplicating data resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate data resources are created to grant access to unauthorized users, then access control requirements are met, but computing resources are wasted due to data duplication
Solution Approach 1:
The patent uses virtual copying through URLs rather than physical data duplication. A privileged user can generate a URL that references a portion of the original data resource without creating a separate copy. The URL acts as a virtual reference that allows unauthorized users to access specific portions of data while the actual data remains stored only once in the original resource, eliminating wasteful duplication while maintaining access control.
2Reliability
If separate data resources are created to grant access to unauthorized users, then access control requirements are met, but storage costs increase due to data duplication
Solution Approach 1:
The patent eliminates the need for physical data copies by using URLs as virtual references. When a privileged user generates a URL, it contains a reference to the original data resource and specifies the portion accessible to unauthorized users. This approach maintains access control functionality while storing the actual data only once, significantly reducing storage resource consumption compared to creating separate sanitized copies.
3Reliability
If separate data resources are created to grant access to unauthorized users, then access control requirements are met, but hardware costs increase
Solution Approach 1:
The patent avoids the need for additional hardware resources by using virtual references through URLs. Instead of provisioning separate storage infrastructure for sanitized data copies, the system uses the existing storage infrastructure with URL-based access control. This eliminates or reduces hardware costs while maintaining the ability to grant controlled access to unauthorized users.
4Reliability
If separate data resources are created to grant access to unauthorized users, then access control requirements are met, but software costs increase
Solution Approach 1:
The patent reduces software development and maintenance costs by eliminating the need for complex data sanitization and copy management software. Instead of requiring software to create, manage, and synchronize separate sanitized copies of data, the system uses simple URL generation and validation logic that references the original data resource, significantly reducing software complexity and associated costs.
Data Source
AI summary
A system for controlling access to data. The system includes an electronic processor configured to receive, from a first computing device, a first resource request using a uniform resource locator (URL) and identify a first data record, from a plurality of data records, corresponding to the URL. The electronic processor is also configured to identify, from the first data record, a first resource and a first user and verify access rights of the first user identified from the first data record to the first resource identified from the first data record. The electronic processor is further configured to, in response to verifying the access rights of the first user to the first resource, execute a first query identified from the first data record on the first resource to generate a first set of query results and transmit, to the first computing device, the first set of query results.