Token-Based Attribute Aggregation for Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security systems face inefficiencies in processing user access to resources due to the need to examine numerous attributes, which can lead to slower authentication and access control decisions.
Innovation Solution
A token-based system that stores and processes tokens representing user attributes, allowing for the determination of required attributes and missing attributes, thereby requesting only necessary tokens for access, facilitating faster and more efficient access control decisions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the security system examines numerous attributes to make access decisions, then the accuracy and completeness of access control is improved, but the processing time increases
Solution Approach 1:
The patent segments the attribute evaluation process into two distinct phases: a pre-computed token generation phase where attributes are aggregated into tokens, and a real-time access decision phase where only token matching is performed. This segmentation allows comprehensive attribute analysis to be done beforehand, while fast token comparison is used during actual access requests, thus resolving the contradiction between thorough evaluation and quick processing.
Solution Approach 2:
The system performs preliminary action by pre-computing and storing tokens that represent aggregated attributes in a token store before access requests are made. This preliminary aggregation of attributes into tokens eliminates the need to examine individual attributes during real-time access decisions, enabling both complete attribute consideration and rapid processing speed.
2Reliability
If all attributes are processed for every access request, then comprehensive security validation is achieved, but system efficiency decreases
Solution Approach 1:
The patent extracts the computationally intensive attribute aggregation operation from the real-time access request processing flow. By taking out the attribute processing step and performing it preliminarily to create tokens, the system achieves comprehensive security validation through complete attribute consideration while maintaining high processing throughput during actual access decisions.
Solution Approach 2:
The system changes the parameter representation from individual attributes to aggregated tokens. This parameter transformation allows the system to maintain security validation completeness by preserving all attribute information in token form, while dramatically improving productivity by reducing the complexity of real-time comparisons from examining multiple individual attributes to matching compact token representations.
Data Source
AI summary
According to one embodiment, an apparatus may store a plurality of tokens. The apparatus may receive a subject token indicating an attempt to authenticate a user. The apparatus may determine at least one token-based rule based at least in part upon a token in the plurality of tokens and the subject token. The at least one token-based rule may indicate a plurality of attributes required to access a resource. The apparatus may determine a second plurality of attributes represented by the plurality of tokens and the subject token. The apparatus may determine at least one missing attribute, which may be in the plurality of attributes but not in the second plurality of attributes. The apparatus may then request the at least one missing attribute, and in response, receive at least one token representing the at least one missing attribute.