Scalable Leases for Distributed Data Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data access management systems face challenges in efficiently handling concurrent access requests, leading to latency and increased server workload due to the need for individual lease processing, especially when multiple clients seek access to the same data.
Innovation Solution
Scalable leases are introduced, which allow blanket access to data for multiple clients through encrypted or distributed leases, reducing server workload and latency by caching leases at identifiable nodes and renewing them based on demand and workload considerations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If individual leases are processed for each client seeking access to data, then data access control and integrity are maintained, but server workload increases and latency occurs
Solution Approach 1:
The patent merges individual lease processing into a single scalable lease that serves multiple clients simultaneously. Instead of processing separate lease requests from each client, the system issues one scalable lease that collectively grants access to numerous clients, thereby reducing server workload while maintaining data integrity through centralized lease management.
Solution Approach 2:
The scalable lease mechanism provides multi-functionality by serving multiple purposes: it acts as a unified access control mechanism for numerous clients, functions as a single lease object that can be cached and distributed, and simultaneously maintains data integrity while reducing server processing burden. This universal lease structure replaces multiple individual lease operations.
2Ease of operation
If individual leases are processed for each client, then precise access control is maintained, but latency increases due to multiple lease requests
Solution Approach 1:
The system performs preliminary action by issuing a scalable lease in advance that pre-authorizes access for multiple clients. Instead of processing individual lease requests when each client needs access, the scalable lease is established beforehand, allowing clients to obtain access tokens or use the lease information directly, thereby eliminating repeated lease processing delays and reducing latency.
3Extent of automation
If the server processes all lease requests and returns, it can maintain centralized control, but the server becomes overwhelmed and cannot effectively manage lease requests
Solution Approach 1:
The patent extracts the lease management function from the central server and distributes it to clients through the scalable lease mechanism. The server issues a single scalable lease object that clients can independently manage and use for access control. This extraction removes the burden of processing numerous individual lease requests from the server while maintaining centralized control through the initial lease issuance and renewal policies.
4Productivity
If blanket leases are issued to multiple clients, then server workload is reduced, but access security may be compromised without encryption
Solution Approach 1:
The patent applies local quality by encrypting the scalable lease with client-specific keys or using selective distribution mechanisms. Different portions of the lease information are secured with different encryption schemes based on client authorization levels. This ensures that while the lease is distributed broadly to reduce server workload, each client receives only the appropriate level of access security tailored to their specific authorization, maintaining both scalability and security.
Data Source
AI summary
Scalable leases reduce latency and reduce the burden on a server in managing data leases. Instead of processing individual lease requests for clients seeking access to the same data, scalable leases provide for blanket leases that all of the clients can use to access the selected data. Leases may be encrypted or selectively distributed to restrict access to the data. Moreover, distributed data structures may be used to cache leases at identifiable nodes in a network to offload work from the server without all clients in the network having to cache all blanket leases issued. Thresholds for issuing blanket leases may be determined or adjusted by considerations such as demand for the selected data and server workload. Similarly, leases may be renewed on the basis of demand for selected data, conflicting lease requests, and other factors. Scalable leases may be issued for read leases and controlled write leases.