Reputation-Based Access Control Using Peer Feedback
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current access control methods for suspected security risks are inefficient, relying on superior evaluation and biased personal decisions, which are not instantaneous and do not account for real-time reputation assessments.
Innovation Solution
Implementing a reputation-based access control system that identifies and evaluates a requesting subject's reputation, comparing it to the access policy of the requested resource, allowing or denying access based on the subject's skill level and peer feedback, using a computer system with a reputation-based access control unit and database.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a superior evaluates each subject personally to deny access, then access control decisions can be made based on human judgment, but the process is not instantaneous and is subject to personal biases
Solution Approach 1:
The patent replaces the mechanical system of human superior evaluation with an automated computer-based reputation assessment system. The system retrieves reputation data from a database, compares it against access policies, and makes instantaneous decisions without human intervention, thereby eliminating personal biases and achieving both reliability and speed.
Solution Approach 2:
The system enables self-service by automatically assessing subject reputation and making access control decisions without requiring superior intervention. The computer system independently retrieves reputation data, evaluates it against policies, and executes access decisions, freeing human superiors from manual evaluation tasks.
2Reliability
If a superior evaluates each subject personally to deny access, then access control decisions can be made based on human judgment, but the superior must have access to a control system which adds complexity
Solution Approach 1:
The patent extracts the complex control system access requirement from the decision-making process. Instead of requiring superiors to access and operate a control system, the system automatically retrieves reputation data from a database and makes decisions independently, simplifying the interface to just subject identification and policy configuration.
3Productivity
If real-time reputation assessment is implemented, then access control decisions become instantaneous and unbiased, but the system complexity increases
Solution Approach 1:
The patent applies preliminary action by pre-calculating and storing subject reputation scores in a database before access decisions are needed. When access is requested, the system simply retrieves the pre-computed reputation data and compares it against policies, making the decision process fast and avoiding complex real-time calculations.
Solution Approach 2:
The patent introduces a reputation database as an intermediary between subject identification and access decision. This intermediary stores pre-processed reputation information, allowing the system to make fast decisions without directly querying complex source data, thereby reducing system complexity while maintaining speed.
Data Source
AI summary
Approaches for providing reputation based access control are provided. Specifically, at least one approaches includes: identifying a requesting subject that is requesting access to a controlled resource; retrieving the requesting subject's reputation stored as a virtual attribute in a reputation-based access control database, wherein the requesting subject's reputation comprises a value for skill for operating with the requested controlled resource, and wherein the requesting subject's reputation is modified following an indication from a peer of the requesting subject that the requesting subject's value for skill is diminished; retrieving the requested controlled resource's policy; determining if the requesting subject's reputation meets the requested controlled resource's policy; if the requesting subject's reputation meets the requested controlled resource's policy, allowing the requesting subject access to the requested controlled resource; and if the requesting subject's reputation does not meet the requested controlled resource's policy, denying the requesting subject access to the requested controlled resource.