Topic-Based Data Access Control Without Explicit Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data management systems face challenges in managing limited storage capacity and access control, particularly when explicit authorization is required, leading to reduced utility of stored data due to restricted access and inefficient storage management.
Innovation Solution
Implementing an automated access control model that classifies data based on relevance to the data subject, dynamically updates topic rankings, and grants access without explicit grants, thereby optimizing storage and access management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If explicit authorization is required for data access, then data security is improved, but data utility and access efficiency deteriorate
Solution Approach 1:
The system performs preliminary classification of data into topics and pre-establishes access control models for each topic before access requests occur. This allows the system to quickly determine appropriate access rights without requiring explicit authorization at the time of access, thereby maintaining security while improving access efficiency
Solution Approach 2:
The system automatically selects and applies access control models based on the classified topics of requested data, enabling the system to self-manage access control without requiring manual authorization. This automated self-service approach maintains security protocols while eliminating the need for explicit user authorization for each access request
2Measurement precision
If manual authorization is required for data access, then access control precision is improved, but system complexity and operational burden increase
Solution Approach 1:
The system segments data into distinct topics and creates separate access control models for each topic. This segmentation allows for precise control over access to different types of data while simplifying the overall system by breaking down complex access control into manageable, topic-specific units that can be automatically applied
Solution Approach 2:
The system changes the parameter of access control from manual authorization decisions to automated model selection based on data classification. By transforming access control into a parameter-driven process where the topic classification automatically determines the appropriate access control model, the system maintains precision while reducing complexity
3Quantity of substance
If all data is stored with equal priority, then data completeness is improved, but storage efficiency and resource utilization deteriorate
Solution Approach 1:
The system applies local quality by classifying data into different topics and assigning different storage priorities and access control characteristics to each topic. This allows the system to maintain complete data storage while optimizing resource utilization by treating different types of data differently based on their topic classification
Data Source
AI summary
Methods and systems for managing access to data in a data management system are disclosed. To manage access to data, data management system may limit the access to data stored within the data management system based on an identity of a requestor from which a request for a portion of the data is obtained. Data management system may identify an access control model usable to manage access to the data stored in the data management system based on topics associated with the identity of the requestor and relevancy of each topic. To identify an access control model, data management system may use the identity of the requestor to identify associated topics and topic rankings for the identified topics. Based on the identified access control model, data management may provide a response to the requestor to service the request for a portion of data.