Sensitivity Tag Mapping for Accurate Resource Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security systems face challenges in properly integrating new sensitivity tags assigned by artificial intelligence and machine learning applications with pre-existing sensitivity tags, leading to potential interoperability issues and undesired denial of access to protected resources.
Innovation Solution
A security manager integrates new sensitivity data tags with pre-existing tags by mapping them to predefined categories using a lookup table, verifying user authority over both, and granting access only when the user has permission for all combined tags.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If new sensitivity tags from AI/ML applications are integrated with pre-existing sensitivity tags, then data security and access control accuracy are improved, but system complexity and integration challenges increase
Solution Approach 1:
The patent introduces a security manager as an intermediary component that mediates between AI/ML applications assigning new sensitivity tags and the existing security system with pre-existing tags. The security manager receives authorization requests containing new tags, maps them to corresponding pre-existing tags using a lookup table, integrates both tag sets, and makes access decisions. This intermediary approach enables seamless integration of new tagging systems without directly modifying the existing security infrastructure, thereby improving access control accuracy while managing system complexity.
2Measurement precision
If new sensitivity tags are added to data resources, then data categorization precision is improved, but interoperability issues and access denial increase
Solution Approach 1:
The patent implements a lookup table that pre-establishes mappings between new sensitivity tags from AI/ML applications and corresponding pre-existing sensitivity tags in the security system. This preliminary action ensures that when new tags are assigned to data resources, they can be automatically translated and integrated with existing tag systems. The lookup table is prepared in advance, enabling seamless interoperability between different tagging systems without causing access denials or integration issues.
3Reliability
If user authority verification is performed over both new and pre-existing tags, then security assurance is improved, but processing time and operational complexity increase
Solution Approach 1:
The patent merges the verification of new sensitivity tags from AI/ML applications with the verification of pre-existing sensitivity tags in a unified authorization process. The security manager integrates both tag sets and performs a single combined authority check against the user's credentials, rather than conducting separate verification processes. This merging approach maintains comprehensive security assurance by checking both tag types while reducing processing time and operational complexity through consolidated verification.
Data Source
AI summary
An apparatus includes a processing device; and memory that stores computer program instructions that, when executed, cause the processing device to produce at least one mapped new sensitivity data tag for at least one data resource based on an authorization request for the at least one data resource. The authorization request, such as from a resource manager, includes at least one new sensitivity data tag associated with the at least one data resource. The processing device provides permission to the at least one data resource in response to the authorization request, based on verifying that a user associated with the authorization request has authority over the at least one mapped new sensitivity data tag and over at least one pre-existing sensitivity data tag associated with the at least one data resource. Related methods and computer products are also described.