Security-Level Map Filtering for Controlled Data Display
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems struggle to effectively control which data items are shown on a map, particularly when different data items have varying security levels, leading to challenges in access control and data security.
Innovation Solution
A method and system for generating security level-aware maps that involve receiving a map request, determining security conditions, filtering data items based on their security levels, and adding only those that satisfy the security conditions to the map, using processors and computing devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all data items are presented on the map without filtering, then the map provides complete information coverage, but security control is compromised and unauthorized sensitive data may be exposed
Solution Approach 1:
The patent applies local quality by assigning different security levels to different data items on the map. Each data item is evaluated individually against the user's security clearance, allowing the map to display complete information where appropriate while restricting access to sensitive data locally, thus maintaining both information completeness and security control.
Solution Approach 2:
The system performs preliminary security classification and filtering of data items before they are presented to the user. By pre-evaluating each data item's security level and comparing it with the user's clearance in advance, the system ensures that only authorized data is included in the map output, preventing unauthorized information exposure while maintaining complete information coverage for authorized users.
2Reliability
If security filtering is applied to all data items, then unauthorized data is blocked, but processing time and computational resources increase
Solution Approach 1:
The patent implements partial action by applying security filtering selectively to data items based on their sensitivity and the user's clearance level. Rather than uniformly processing all data items with the same level of security checking, the system applies appropriate filtering only where necessary, reducing overall processing time while maintaining effective access control for sensitive data.
Solution Approach 2:
The system changes the security parameter (clearance level) dynamically based on the user's authorization and the data item's classification. By adjusting the filtering strictness according to the specific security parameters of each data item and user, the system optimizes processing efficiency while ensuring proper access control is maintained for all sensitive information.
3Measurement precision
If security level checking is performed for each data item, then access control precision is improved, but system complexity increases
Solution Approach 1:
The patent segments the data items into different security categories and processes each segment according to its classification. By dividing the data stream into manageable security-level groups, the system achieves precise access control for each data item while avoiding the complexity of treating all data uniformly, thus improving precision without proportionally increasing system complexity.
Solution Approach 2:
The system introduces an intermediary security classification layer that mediates between the raw data items and the user's clearance level. This intermediary mechanism automatically evaluates and tags data items with appropriate security levels, simplifying the access control logic while maintaining high precision in determining which data should be displayed to each user.
4Reliability
If only authorized data items are displayed on the map, then security is enhanced and clutter is reduced, but map completeness for unauthorized users deteriorates
Solution Approach 1:
The patent applies local quality by customizing the map content according to each user's security clearance level. Each user receives a map that is complete and usable for their specific authorization level, displaying all data items they are permitted to access while filtering out restricted information. This ensures both security enhancement and maintained usability for each user category.
Solution Approach 2:
The system performs preliminary filtering of data items based on user clearance before generating the map display. By pre-processing the data to include only authorized items for each user, the system ensures that the resulting map is both secure and fully usable for that user's needs, without requiring post-processing or user-side filtering that would compromise usability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems and methods for data security and access control in relation to generating and/or managing maps are provided. In some embodiments, a method includes receiving a map request from a first user to generate a map with a map security level, in response to determining that the map security level satisfies the first security level threshold, generating the map with the map security level, receiving a query from the first user, identifying a data feed associated with the query, receiving the data feed from a data source, the data feed including a plurality of data items and each data item corresponding to a corresponding data security level, for each data item of the plurality of data items, determining whether the data item satisfies a second security condition, and adding one or more data items of the plurality of data items that satisfy the second security condition on the map.