Secure Access Policy Analysis for Preemptive User Notifications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure access systems do not effectively leverage user activity information to manage the impact of access policy changes, leading to suboptimal end-user experiences when access policies are updated.
Innovation Solution
A method and apparatus that analyze user and device data to determine the affected clients and users by access policy changes, sending preemptive notifications to minimize disruption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access policy changes are implemented to enforce security updates, then security compliance is improved, but user experience deteriorates due to unexpected access denials
Solution Approach 1:
The system performs preliminary analysis of access policy changes to identify affected users and devices before the changes are enforced. Preemptive notifications are sent to users whose access will be impacted, allowing them to prepare or request exceptions in advance, thus maintaining security compliance while improving user experience through proactive communication.
Solution Approach 2:
The system monitors user activities and access patterns, using this feedback to analyze the impact of access policy changes. By leveraging collected user activity information, the system can predict which users will be affected and send targeted notifications, creating a feedback loop that balances security enforcement with user convenience.
2Reliability
If access control checks are updated to address security policy changes, then security reliability is improved, but system complexity increases due to frequent policy updates
Solution Approach 1:
Before implementing access policy changes, the system performs preliminary analysis to identify affected users and devices. This upfront assessment allows for careful planning and coordination of policy updates, reducing the operational complexity of managing frequent changes while maintaining security reliability.
3Ease of operation
If preemptive notifications are sent to all affected users, then user experience is improved, but communication overhead increases
Solution Approach 1:
Instead of sending notifications to all users uniformly, the system applies local quality by sending preemptive notifications only to specifically identified affected users and devices. This targeted approach improves user experience for those who need to know while minimizing unnecessary communication overhead to unaffected users.
Data Source
AI summary
A method, non-transitory computer readable medium and device that assists with providing secure access using preemptive measures includes receiving one or more access policy changes. Data associated with a plurality of client computing devices and a plurality of users using the plurality of client computing devices is obtained upon receiving the one or more access policy changes. One or more of the plurality of client computing devices that are affected by the received one or more access policy changes is determined based on the obtained data associated with the plurality client computing devices and the plurality of users. A notification including a preemptive action is selectively sent to each of the affected one or more client computing devices and one or more affected users.