Token-Based Access Control System for Decision Latency Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security systems face inefficiencies in making access decisions due to the complexity of processing individual attributes for access control, which can lead to slower and less efficient access management.
Innovation Solution
A token-based system that stores and processes token-based rules to determine access values by combining subject, resource, and network tokens, allowing for faster and more efficient access decisioning by condensing multiple attributes into tokens.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If individual attributes are processed for access control decisions, then access control accuracy is maintained, but processing time increases and efficiency decreases
Solution Approach 1:
The patent segments the access control system into multiple independent rule engines, each responsible for evaluating specific token-based rules. This segmentation allows parallel processing of different rules simultaneously, reducing overall processing time while maintaining comprehensive access control accuracy through the aggregation of multiple rule evaluations.
Solution Approach 2:
The system performs preliminary actions by pre-processing and tokenizing attributes before access decisions are needed. Attributes are converted into tokens and stored in advance, so that during actual access control operations, the system only needs to evaluate rules against pre-tokenized data, significantly reducing real-time processing time while preserving evaluation accuracy.
2Reliability
If multiple attributes are processed individually for access decisions, then comprehensive access control is achieved, but system complexity increases
Solution Approach 1:
The patent introduces tokens as intermediary elements between raw attributes and access control rules. Instead of directly processing multiple individual attributes through complex rule evaluations, the system first converts attributes into standardized tokens, which then serve as simplified inputs to rule engines. This intermediary layer reduces system complexity by standardizing data representation while maintaining comprehensive access control through the preservation of all necessary attribute information in token form.
3Measurement precision
If detailed attribute processing is performed, then access decision accuracy is improved, but processing efficiency decreases
Solution Approach 1:
The system applies parameter changes by transforming detailed attributes into compact token representations that preserve essential information while reducing data volume. This parameter transformation maintains access decision accuracy by retaining critical attribute characteristics in token form, while simultaneously improving processing efficiency through reduced data size and simplified rule evaluation operations.
Data Source
AI summary
According to one embodiment, an apparatus may store at least one subject token associated with a user and a device, at least one resource token associated with the resource, and at least one network token associated with a network. The apparatus may determine various access values associated with these stored tokens. The apparatus may then determine the value of a first access value based on the values of these various access values. The apparatus may determine that the value of the first access value is insufficient to grant access to the resource and determine that access by at least one of the user and the device to the resource over the network should be denied.