Quorum-Based Access Management for Cloud Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cloud computing environments, the risk of unauthorized access to resources exists due to compromised entities, which can lead to sensitive data exposure or functionality alteration, as conventional single-signature authentication methods are vulnerable to faults or unauthorized access.
Innovation Solution
Implementing a quorum-based access management system that requires multiple authenticated and authorized entities to submit signatures within a specified time frame for resource access, using a quorum manager to enforce policies and ensure that access is granted only when a quorum of valid signatories has been reached, thereby enhancing security against compromised entities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If single-signature authentication is used, then ease of operation is improved, but security and reliability deteriorate due to compromised entities
Solution Approach 1:
The authentication process is segmented into multiple independent signature requirements. Instead of relying on a single signature, the system divides the authorization process into multiple discrete signature events from different entities, where each signature represents an independent authentication step. This segmentation ensures that compromise of one signature does not lead to unauthorized access.
Solution Approach 2:
The system adds a temporal dimension to the authentication process by requiring signatures within a specified time frame. This transforms the traditional single-point authentication into a time-bound multi-step process, creating a fourth dimension (time) to the authentication space that enhances security without significantly complicating the user experience.
2Reliability
If multiple signatures are required, then security and reliability are improved, but device complexity and processing time increase
Solution Approach 1:
The system performs preliminary validation of signature requirements before initiating the access request process. By pre-defining the quorum threshold, required signatory types, and time frames, the system avoids complex real-time decision-making and reduces processing complexity during the actual authentication event.
Solution Approach 2:
The patent introduces a quorum manager as an intermediary component that handles the complexity of coordinating multiple signatures. This mediator entity manages signature collection, validation, and quorum determination, isolating the complexity from both the resource provider and the signatories, thereby simplifying the overall system architecture.
3Reliability
If quorum threshold is increased, then security against compromised entities is improved, but access efficiency and productivity decrease
Solution Approach 1:
The quorum threshold and time frame parameters are made dynamic rather than fixed. The system can adjust these parameters based on the sensitivity of the resource, the trust level of signatories, and operational context. This dynamic approach allows the system to optimize between security and efficiency for different access scenarios without requiring a uniformly high quorum threshold.
Solution Approach 2:
The system changes the parameters of authentication by allowing flexible configuration of quorum thresholds, time frames, and signatory types. By varying these parameters based on the specific access request and resource sensitivity, the system can achieve high security for critical operations while maintaining efficient access for routine operations.
Data Source
AI summary
A quorum-based access mechanism can require multiple entities to provide credentials over a determined period of time in order to obtain access to one or more resources in an electronic environment. This can include receiving a request that is signed by multiple signatories, or receiving multiple requests within a determined period that are each signed by a respective and authorized signatory. In some embodiments the receiving of a primary request causes notifications to be sent to other potential signatories, and a specified or minimum number must respond timely with a signed request to have the access granted. The quorum-based access mechanism can function as an additional authorization layer sitting in front of more conventional authorization and authentication mechanisms. In some embodiments a quorum token can be passed with the request, whereby resources in the environment can make access determinations based on the information in the token.