Secure Workflow System with Centralized Access Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current computer-based systems lack a secure and controlled environment for managing workflow and data, particularly in collaborative settings, failing to provide traceability, control, and context for evolving user needs across organizational boundaries and different security standards.

Innovation Solution

A secure computer-based system that enables secure communication and data management through centralized control, encryption, and access management, allowing for controlled collaboration by rendering content inaccessible after a predetermined time, preventing alteration or copying, and maintaining an audit trail for accountability.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If centralized control and encryption are implemented for secure data management, then security and confidentiality are improved, but system complexity and implementation difficulty increase

Engineering Contradiction:

ImprovesecurityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a controlled environment intermediary system that mediates between users and the data management infrastructure. This intermediary provides centralized control and encryption capabilities while abstracting the complexity from end users, allowing them to benefit from secure data management without directly dealing with the underlying system complexity.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional hardware-based security solutions with software-based controlled environment mechanisms. By substituting physical security infrastructure with virtualized control systems, the patent achieves centralized control and encryption while reducing the need for complex hardware installations and maintenance.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If hardware-based security solutions are deployed, then security control is improved, but maintenance costs and infrastructure requirements increase

Engineering Contradiction:

Improvesecurity controlVSAvoidmaintenance cost

Core Design Contradiction:

ReliabilityVSEase of manufacture

Solution Approach 1:

The patent systematically replaces hardware-based security mechanisms with software-based controlled environment solutions. This substitution eliminates the need for physical security infrastructure such as hardware tokens, secure enclaves, and dedicated security appliances, thereby reducing maintenance costs and infrastructure requirements while maintaining security control through virtualized mechanisms.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent creates virtual copies of security control mechanisms that can be replicated and distributed across the system without requiring physical hardware duplication. This allows security control to be maintained through software instances that can be copied and deployed more economically than hardware solutions.

Inventive Principle:

Principle #26Copying

3Reliability

If access control and content protection are enforced, then data security is improved, but ease of collaboration and content sharing deteriorate

Engineering Contradiction:

Improvedata securityVSAvoidease of collaboration

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent implements dynamic access control within the controlled environment that can adapt to different collaboration scenarios. The system allows content protection measures to be dynamically adjusted based on user roles, document sensitivity, and collaboration context, enabling secure data management while maintaining ease of collaboration through flexible, context-aware permission management.

Inventive Principle:

Principle #15Dynamics

4Reliability

If traceability and audit trails are implemented, then accountability and security monitoring are improved, but system complexity and processing overhead increase

Engineering Contradiction:

ImproveaccountabilityVSAvoidprocessing overhead

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges traceability and audit trail functions into the core controlled environment operations. By integrating accountability mechanisms with existing security and access control systems, the patent achieves comprehensive monitoring and traceability without requiring separate, complex processing infrastructure, thereby reducing overall system complexity and processing overhead.

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS9569596B2Secure workflow and data management facility

Publication Date: 2017.02.14 PALO ALTO NETWORKS INC

AI summary

Disclosed is a computer program that provides a secure workflow environment through a cloud computing facility, wherein the secure workflow environment may be adapted to (1) provide a plurality of users with a workspace adaptable to provide secure document management and secure communications management, wherein the users comprise at least two classes of user, including a participant and a subscriber, the subscriber having control authority within the workspace that exceeds that of the participant and the participant having control over at least some of the participants own interactions with the workspace, (2) maintain a secure instance of each communication provided by each of the users such that each communication can be managed, (3) maintain a secure instance of each document interaction provided by each user such that each interaction can be managed; and extending the secure workflow environment to the users through a secure network connection.