Shared Data Infrastructure Access Control for Secure Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data security approaches in shared infrastructures are inadequate for maintaining security and efficiency due to reliance on physical barriers, which can compromise transmission efficiency and increase resource usage, especially in collaborative environments.
Innovation Solution
Implement a computing system that determines access levels and permissions for clients, selectively transmits and replicates data based on security levels, and applies encryption based on data security, ensuring secure and efficient data exchange among multiple entities sharing a common storage space.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical barriers and separate infrastructures are used to store and control access to data by each entity, then data security is improved, but transmission efficiency and productivity deteriorate due to latencies and increased infrastructural requirements
Solution Approach 1:
The patent segments data into classified portions with different security levels and stores them in a shared infrastructure with differentiated access controls. Each entity receives only the data portions appropriate to their security clearance, eliminating the need for complete physical isolation while maintaining security. This allows efficient data transmission within security constraints.
Solution Approach 2:
The patent introduces a data classification and access control system as an intermediary between the shared infrastructure and individual entities. This intermediary manages security permissions, determines which classified data portions each entity can access, and controls transmission accordingly. This mediator enables secure efficient data exchange without requiring separate isolated infrastructures for each entity.
2Reliability
If physical barriers and isolated infrastructures are used for each entity, then data security is improved, but resource usage and infrastructural requirements increase
Solution Approach 1:
The patent merges multiple entities' data storage and access operations into a single shared infrastructure. Instead of maintaining separate isolated infrastructures for each entity, the system combines resources while implementing data classification and access controls. This consolidation reduces redundant infrastructural requirements while maintaining security through logical rather than physical isolation.
Solution Approach 2:
The shared infrastructure is designed to serve multiple entities simultaneously with different security requirements. The system provides universal access controls and data classification mechanisms that accommodate various entities' needs within the same infrastructure, eliminating the need for separate specialized infrastructures for each entity.
3Reliability
If isolated infrastructures are used for each entity, then data security is maintained, but the ability to adapt to latest security threats deteriorates due to limited awareness
Solution Approach 1:
The patent implements a centralized access control system that monitors and manages data access across all entities in the shared infrastructure. This system provides feedback mechanisms to track access patterns, detect security anomalies, and update access controls dynamically. The centralized nature of this system enables real-time awareness of security threats across the entire infrastructure, allowing rapid adaptation and response that isolated infrastructures cannot achieve.
Data Source
AI summary
Systems and methods are provided for obtaining a request for a data object or a data structure from a client; determining an access level of the client and one or more access permissions of the requested data object or data structure; determining whether to transmit the requested data object or data structure to the client based on the access level of the client and the one or more access permissions; and transmitting the requested data object or data structure to the client.