Token-Based Attribute Abstraction for Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security systems face inefficiencies in processing and generating tokens that represent groups of attributes, leading to slower access control decisions, as they individually process and examine numerous attributes rather than utilizing token-based abstraction.
Innovation Solution
An apparatus that stores and processes tokens to facilitate access decisions by determining a risk token based on token-based rules, generating a dataset token representing multiple tokens, and correlating it with a session token to streamline access control processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If the security system individually processes and examines numerous attributes, then the access control decision can be comprehensive and accurate, but the processing time increases and the system becomes slower
Solution Approach 1:
The patent merges multiple individual attributes into a single token structure. Instead of processing attributes separately (e.g., user ID, password, device information, network environment as separate data items), the system combines them into a unified token representation that can be processed as one unit, thereby reducing processing time while maintaining comprehensive evaluation capability
Solution Approach 2:
The patent introduces a token as an intermediary representation between the raw attributes and the access control decision. The token serves as a mediator that encapsulates multiple attributes in a compressed form, allowing the system to work with a simplified representation rather than raw data, thus improving processing efficiency without losing decision accuracy
2Ease of manufacture
If the security system processes individual attributes separately, then the processing logic can be simple and straightforward, but the overall processing efficiency decreases
Solution Approach 1:
The patent segments the attribute processing into two distinct phases: (1) attribute collection and token generation phase, and (2) access control decision phase. By separating these functions, the system can maintain simple processing logic for each phase while achieving high overall efficiency through the token-based approach that consolidates multiple attributes into a single processing unit
Data Source
AI summary
According to one embodiment, an apparatus may store a plurality of tokens associated with a session. The session may facilitate access to a resource by a user. The session may be identified by a session token. The apparatus may determine, based on a token-based rule, a second plurality of tokens required to facilitate determination of a risk token. The risk token may be used to facilitate determination of an access decision to the resource. The apparatus may determine that the plurality of tokens comprises the second plurality of tokens and generate a dataset token that represents the plurality of tokens. The apparatus may then communicate the dataset token to facilitate the generation of the risk token. The apparatus may receive the risk token and correlate it with the session token to facilitate determination of the access decision.