Shared Access Enrollment for Secure Financial Data Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The incomplete network problem in shared computer systems, where a small fraction of eligible users cannot connect with the majority, limits the system's utility, while maintaining security is crucial to prevent breaches and data theft.
Innovation Solution
A system for rapid enrollment of users through social networking, utilizing a selective list of eligible users, an accrediting organization, and an invitation computer system to verify and grant access rights, ensuring only authorized users can access the shared computer system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the system restricts access to only approved users to maintain security, then security is improved, but the network connectivity and utility are worsened because users cannot connect with eligible people who are not yet approved
Solution Approach 1:
The patent introduces an intermediary mechanism (email system and invitation process) that bridges the gap between approved users and eligible non-users. The system sends encrypted invitations through email to eligible people, allowing them to join the network without compromising security. This intermediary process enables network expansion while maintaining the approved user restriction.
Solution Approach 2:
The system performs preliminary actions by maintaining a selective list of eligible users in advance. Before formal approval, eligible individuals are identified and stored in the selective list, allowing approved users to invite them. This preliminary identification enables future connectivity without immediate security risks.
2Adaptability or versatility
If the system allows more users to join to improve network utility, then network connectivity is improved, but security risks increase due to potential breaches and unauthorized access
Solution Approach 1:
The email system serves as a secure intermediary that verifies and communicates with potential new users. Invitations are sent through this controlled channel, ensuring that only eligible individuals from the selective list can receive and process join requests. This intermediary layer filters out unauthorized access attempts.
Solution Approach 2:
The system employs self-service mechanisms where eligible users must actively respond to invitations and complete verification processes to join. This self-service approach ensures that only genuinely eligible individuals can access the network, reducing the risk of unauthorized entry while allowing organic network growth.
3Reliability
If the system manually approves each new user to maintain security control, then security is maintained, but the enrollment speed and productivity are reduced
Solution Approach 1:
The system performs preliminary actions by pre-identifying and storing eligible users in the selective list before formal enrollment. This preliminary work automates much of the verification process, allowing rapid enrollment of pre-vetted candidates without manual security review for each individual join request.
Solution Approach 2:
The enrollment process is designed as a self-service system where eligible users automatically verify their identities through the invitation process. Once an eligible user responds to an invitation, their enrollment is processed automatically based on their presence in the selective list, eliminating manual approval steps while maintaining security through pre-verification.
Data Source
AI summary
The present invention is directed to a method, apparatus and computer-readable medium for utilizing a shared computer system. The method includes receiving, by way of at least one interface, an access request associated with a potential user of a financial entity for access to a secure data processing center of a financial regulatory system, wherein the secure data processing center is configured to share information associated with specified financial activities. The method includes determining a classification of the potential user with respect to one or more potential or actual access rights to be associated with the potential user for accessing the secure data processing center. The determined classification of the potential user is that the potential user is an eligible user of the secure data processing center as defined by an accrediting organization of the financial regulatory system.