Secure Access Control Through Multi-Administrator Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic mail and data storage systems allow unrestricted access to user accounts by system administrators, enabling unauthorized actions such as impersonation and data manipulation without user knowledge, necessitating a secure access control system.
Innovation Solution
A secure access control system that requires a concert of action between multiple system administrators to access or modify user data, utilizing a secure access processor to issue authorizations and notifications, ensuring data integrity and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If system administrators are given unrestricted access to user accounts and data, then system administrators can perform administrative tasks such as creating, reading, editing and deleting email accounts and data, but this enables unauthorized access and impersonation without user knowledge
Solution Approach 1:
The patent segments administrative access authority by dividing it into multiple independent administrator accounts, each with limited individual power. No single administrator can access or modify user data alone; instead, a concert of action involving multiple administrators is required. This segmentation prevents unauthorized access while maintaining necessary administrative capabilities through distributed authority.
2Reliability
If multiple system administrators are required to act in concert to access user data, then security and data integrity are enhanced, but system complexity and access management overhead increase
Solution Approach 1:
The patent implements feedback mechanisms where the system automatically monitors and tracks administrator actions, user consents, and access requests. The system provides real-time feedback to administrators about the status of concert of action requirements, user notifications sent, and authorization states. This automated feedback reduces the manual coordination burden and simplifies the complex multi-administrator approval process.
Solution Approach 2:
The system enables self-service automation where the access control processor automatically manages the concert of action coordination, user notification delivery, and authorization granting without requiring manual intervention from administrators. The system autonomously handles the complex coordination logistics, reducing operational overhead despite the increased security requirements.
3Adaptability or versatility
If system administrators can access and modify user credentials and data without user knowledge, then administrative flexibility is maintained, but user privacy and data integrity are compromised
Solution Approach 1:
The patent requires preliminary user action and consent before administrators can access or modify user data. The system sends notifications to users seeking their consent or knowledge before administrative access is granted. This preliminary user involvement prevents unauthorized data manipulation while maintaining administrative flexibility for legitimate operations that obtain proper user authorization.
Data Source
AI summary
Disclosed is a system and method for providing secure access control to an electronic network or device. By limiting the ability of a single administrator to act unilaterally without the agreement and/or notification of further system administrators, the data integrity and security of stored data, such as email accounts, may be enhanced and risk of compromise ameliorated. By permitting multiple administrators acting in a concert of action to access stored data, such as without notification of the email account holder, potential misconduct by email account holders may be audited.