Session-Based Access Management for Secure Data Workspaces
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data access management systems lack effective measures to secure data from unauthorized access, particularly in scenarios where user computing devices are hacked, as they often provide access to large volumes of sensitive data, and there is no efficient way to limit data access to prevent data breaches.
Innovation Solution
Implementing a session-based access management system that creates temporary user-specific databases for each workspace, limiting the number of simultaneously accessible workspaces and using separate secure channels for each session, thereby preventing access to original data even if a hacker gains control of a user's device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If user computing devices are provided with access to large volumes of sensitive data, then data accessibility and user productivity are improved, but security against unauthorized access and hacking attempts deteriorates
Solution Approach 1:
The patent segments the entire data set into multiple isolated workspace instances, each accessible only through dedicated secure channels. This segmentation ensures that even if one workspace is compromised, other workspaces remain protected, directly resolving the contradiction between data accessibility and security risk
Solution Approach 2:
The patent introduces secure channels as intermediary components between users and data workspaces. These channels act as mediators that enable data accessibility while enforcing security protocols, thus resolving the contradiction by providing controlled access without exposing raw data directly
2Object-affected harmful factors
If temporary session databases are created for each workspace, then security against hacking is improved, but system complexity and resource consumption worsen
Solution Approach 1:
The patent creates temporary copies of data in session-specific databases rather than providing direct access to original data. This copying mechanism enhances security by isolating users from original data while maintaining functional accessibility, resolving the contradiction between security and system complexity through controlled replication
Solution Approach 2:
The patent employs temporary session databases that are created and destroyed as needed for each user session. These disposable database instances provide security without permanent overhead, resolving the contradiction by using short-lived objects that minimize long-term resource consumption while maintaining security
3Object-affected harmful factors
If the number of simultaneously accessible workspaces is limited, then security and resource management are improved, but user convenience and productivity deteriorate
Solution Approach 1:
The patent implements dynamic limits on simultaneous workspace access that can be adjusted based on user roles, security requirements, and system resources. This dynamic approach resolves the contradiction by allowing flexibility in user convenience while maintaining security and resource management controls
Data Source
AI summary
Systems and methods for data access management can include one or more processors determining settings defining a workspace of a user responsive to a request to establish a session with the workspace, and identifying a set of data items of the workspace using the settings and one or more control access permissions of the user. The one or more processors can generate a database of the workspace using copies of the set of data items, and providing the user access to the database. The one or more processors may delete the database upon detecting closing of the workspace