Supply Chain Access Control with Task-Specific Role Permissions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems, such as described in JP2009-301357A, struggle with inconsistent access authorities for users due to OS and application-level control, and fail to provide detailed access control in complex systems involving multiple users, particularly in supply chains where roles and functions are the same.
Innovation Solution
A system that manages supply chains as a model, assigns roles to task executors, sets task-specific access authorities, and performs access control based on these roles, combining task and function-specific access controls to provide detailed access management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If access control is performed based on roles and functions only, then access control can be simplified, but detailed access control cannot be achieved when the same role and function appear across multiple tasks
Solution Approach 1:
The patent segments access control into three distinct levels: role-based access control (RBAC) for user roles, function-based access control (FBAC) for operations, and task-based access control (TBAC) for specific tasks. This segmentation allows each level to operate independently, enabling detailed control at the task level while maintaining simplicity at higher levels. The access control information is divided into role access authority information, function access authority information, and task access authority information, which can be managed separately.
Solution Approach 2:
The patent adds a task dimension to the traditional role-function access control model. Instead of only considering role and function, the system introduces task as a new dimension, creating a three-dimensional access control framework. This allows the same role-function combination to have different access authorities across different tasks, achieving detailed control without complicating the underlying role and function definitions.
2Device complexity
If the same access authority is given to the same role and function across all tasks, then access control management is easier, but inconsistent access control cannot be handled in complex multi-user systems
Solution Approach 1:
The patent applies local quality by allowing different task access authority information to be assigned to the same role for different tasks. Each task can have its own specific access authority settings, enabling localized access control policies. This means that access authority is not uniform across all tasks but is customized according to the specific requirements of each task, ensuring consistency and reliability in complex multi-user systems.
3Adaptability or versatility
If traditional role-based access control is used, then access control can be implemented, but it cannot handle situations where OS and application-level access control produce inconsistent authorities
Solution Approach 1:
The patent merges role-based access control, function-based access control, and task-based access control into a unified access control system. The access control execution unit integrates information from all three levels and makes access decisions based on the combination. This merging allows the system to handle inconsistencies between different access control levels (such as OS and application-level control) by considering all factors together, thereby improving both adaptability and reliability.
Data Source
AI summary
The invention includes: a model management unit configured to manage a chain of supply-related task as a model; a role management unit configured to assign a role to an executor of each of the tasks to manage the roles; a task access authority setting unit configured to set a task-specific access authority for each of the roles to generate task access authority information; and an access control unit configured to, when access from the executor of each of the tasks is received, refer to the task access authority information based on the role assigned to the executor and perform access control. With such configurations, detailed access control can be performed for a chain of supply-related tasks.