Role-Based Security Policies for Temporary Exception Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing computerized security platforms face challenges in managing security policies due to rigid rules that become bloated and difficult to distinguish between permanent and temporary exceptions, leading to security loopholes and inefficiencies in policy management.

Innovation Solution

Implementing a role-based permissions system with interim security policies that are distinguishable from permanent rules, allowing for temporary exceptions without editing the core rules, and utilizing generative AI to automatically generate policies compatible with specific security platforms.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security rules are rigid and permanent, then security posture is preserved, but security policies become bloated and difficult to manage

Engineering Contradiction:

Improvesecurity postureVSAvoidpolicy management complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments security policies into two distinct types: permanent security rules and temporary security rules. This segmentation allows the system to maintain rigid permanent rules for security posture while enabling flexible temporary rules for exceptional circumstances, thereby resolving the contradiction between maintaining security and managing policy complexity.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces dynamic temporary security rules that can be activated and deactivated based on changing conditions, contrasting with static permanent rules. This dynamic approach allows the security system to adapt to temporary needs without compromising the stability of permanent security requirements, reducing policy management complexity.

Inventive Principle:

Principle #15Dynamics

2Adaptability or versatility

If security rules are flexible and allow exceptions, then adaptability improves, but security loopholes increase

Engineering Contradiction:

Improvepolicy flexibilityVSAvoidsecurity loopholes

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

By segmenting security policies into permanent and temporary categories, the system provides flexibility through temporary rules while maintaining security integrity through permanent rules. The clear distinction prevents temporary exceptions from permanently compromising security, thus resolving the contradiction between adaptability and security loopholes.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent requires that temporary security rules be pre-defined with specific activation conditions and expiration parameters. This preliminary configuration ensures that flexibility is granted only under controlled, predetermined circumstances, preventing unauthorized security loopholes while maintaining necessary adaptability.

Inventive Principle:

Principle #10Preliminary action

3Productivity

If permanent security rules are edited frequently, then policy updates occur, but rule exceptions and permanent rules become commingled

Engineering Contradiction:

Improvepolicy update efficiencyVSAvoidrule distinction difficulty

Core Design Contradiction:

ProductivityVSDifficulty of detecting and measuring

Solution Approach 1:

The patent segments security policies into permanent and temporary rules with distinct storage and management mechanisms. This segmentation prevents commingling of rule exceptions and permanent rules, making it easy to detect and manage policy updates without confusion, thus resolving the contradiction between update efficiency and rule distinction.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent implements a copying mechanism where temporary security rules are created as separate entities from permanent rules rather than editing permanent rules directly. This copying approach maintains the integrity of permanent rules while allowing flexible temporary exceptions, eliminating the need to distinguish between original rules and exceptions.

Inventive Principle:

Principle #26Copying

4Reliability

If role-based permissions are implemented, then security control improves, but system complexity increases

Engineering Contradiction:

Improvesecurity controlVSAvoidsystem architecture complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a universal role-based permission system that applies across both permanent and temporary security rules. This multi-functional approach allows a single permission framework to manage diverse security requirements, improving security control without proportionally increasing system complexity.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12580970B2Computerized security platforms including a role-based permissions system

Publication Date: 2026.03.17 AURADINE INC

AI summary

In an example method, a computer system accessing first natural language user input representing a request to generate security policies for a computerized security platform, and generates the security policies using a computerized large language model (LLM). Generating the one or more security policies includes determining an identity of the computerized security platform, providing at least a portion of the first natural language user input and the identity of the computerized security platform to the LLM, and receiving, from the LLM, first output data representing the security policies. The first output data has a computer language syntax that is compatible with the computerized security platform. Further, the system causes the security policies to be presented to a user and to be stored on a computerized storage device.