Unified Configuration Rules for Identity Management

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Identity management systems face challenges with rule proliferation, inter-domain redundancy, outdated rules, and reduced human-readability due to multiple management domains with inconsistent rule formats and syntax, leading to inefficiencies and security risks.

Innovation Solution

An automated, iterative optimization process that converts configuration rules from different domains into a standardized format, applies optimization methods, and modifies system configuration values based on optimized rules to eliminate redundancies and ensure consistent policy enforcement across all management domains.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple management domains with different rule formats and syntax are used to manage diverse IT assets, then the system can handle diverse asset types and organizational structures, but rule proliferation and inter-domain redundancy occur leading to reduced efficiency and increased complexity

Engineering Contradiction:

Improveability to manage diverse IT assets across different domainsVSAvoidcomplexity of configuration rules across multiple domains

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent creates a universal rule format that can represent configuration rules from multiple different management domains (AWS, Azure, GCP, on-premises systems) in a unified manner. This universal format enables the system to handle diverse asset types and organizational structures while eliminating the need for separate rule management for each domain, thereby reducing rule proliferation and inter-domain redundancy.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system transforms configuration rules by changing their format parameters from domain-specific syntaxes to a standardized universal format. This parameter transformation allows rules to be compared, optimized, and managed consistently across all domains while preserving their original meaning and functionality, thus reducing complexity without sacrificing adaptability.

Inventive Principle:

Principle #35Parameter changes

2Productivity

If configuration rules are manually managed across multiple management domains, then human-readability is maintained, but rule optimization becomes inefficient and outdated rules persist

Engineering Contradiction:

Improveefficiency of rule optimizationVSAvoidhuman-readability of configuration rules

Core Design Contradiction:

ProductivityVSEase of operation

Solution Approach 1:

The patent introduces an intermediary universal rule format that serves as a bridge between human-readable domain-specific rules and machine-optimizable standardized rules. This intermediary representation allows automated optimization algorithms to process rules efficiently while maintaining the ability to translate back to human-readable formats, thus resolving the conflict between optimization efficiency and human-readability.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system enables self-service optimization by automatically analyzing, comparing, and optimizing configuration rules across domains without requiring manual intervention. The automated process identifies redundancies, resolves conflicts, and updates rules while maintaining human-readability through the universal format, thereby improving productivity without sacrificing ease of operation.

Inventive Principle:

Principle #25Self-service

3Reliability

If domain-specific rule formats are used for each management domain, then rules can be precisely tailored to specific domain requirements, but inter-domain redundancy and inconsistent policy enforcement occur

Engineering Contradiction:

Improveconsistency of policy enforcementVSAvoidredundancy of configuration rules across domains

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The patent merges configuration rules from multiple management domains into a unified rule set using the universal format. By combining rules across domains and eliminating duplicates, the system reduces inter-domain redundancy while maintaining consistent policy enforcement through standardized representation and centralized management of the unified rule set.

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS12260228B1Optimizing configuration rules over multiple management domains

Publication Date: 2025.03.25 AXONIUS SOLUTIONS LTD

AI summary

Optimizing configuration rules in a computerized system comprises accessing a set of configuration rules associated with one or more management domains, computing standardized configuration rules, and iteratively optimizing these rules. The optimization process involves computing a candidate set of optimized rules, comparing the candidate set of optimized rules to the original set using a distance metric, and accepting the optimized set if it meets a proximity threshold. System configuration values are then modified based on the optimized rules. The method enhances efficiency and security in identity management systems by reducing redundancies, updating outdated rules, and simplifying rule expressions.