Unified Instance Authorization with Change Trigger Tables

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems lack efficient methods for tracking and managing modifications across hierarchical database structures, particularly in application-owned hierarchies, which hinders dynamic data processing and authorization evaluations.

Innovation Solution

A method is introduced that involves defining a change trigger table for tracking modifications in hierarchical database tables, providing this data to a unified instance authorization application, and using an explosion table for data updates, which allows for improved authorization performance and parallel data processing across hierarchies.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If hierarchical database structures are used to organize object instances, then data relationships and access control are improved, but tracking and managing modifications across hierarchies becomes complex and inefficient

Engineering Contradiction:
Improvedata access controlVSAvoidmodification tracking complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the hierarchical database modification tracking into discrete change trigger records, each capturing specific modification events (insertions, deletions, updates) at different hierarchy levels. This segmentation allows independent tracking of individual changes without requiring complex global tracking mechanisms, resolving the contradiction between maintaining reliable access control and reducing modification tracking complexity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces change trigger tables as intermediary structures between the hierarchical database and the authorization evaluation system. These trigger tables capture modification events and propagate them through the hierarchy, serving as a mediator that simplifies the complexity of tracking changes across multiple hierarchy levels while maintaining data integrity and access control reliability.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If centralized authorization evaluation is used to ensure data security, then access control reliability is improved, but data processing speed and system responsiveness deteriorate

Engineering Contradiction:
Improveaccess control reliabilityVSAvoiddata processing speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent performs preliminary authorization evaluations by pre-processing change trigger records and updating explosion tables in advance. When modifications occur in the hierarchical database, the system proactively evaluates authorization rules and updates relevant authorization data before actual data access operations occur. This preliminary action ensures access control reliability is maintained while improving data processing speed during actual operations.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements dynamic authorization evaluation that adapts to the specific modification events captured in change trigger tables. Rather than performing static, centralized authorization checks for all operations, the system dynamically evaluates only the relevant authorization rules based on the type and location of modifications, thereby maintaining security reliability while significantly improving processing speed and system responsiveness.

Inventive Principle:
Principle #15Dynamics

3Measurement precision

If explosion tables are updated in real-time to reflect hierarchy changes, then authorization accuracy is improved, but system performance and processing efficiency worsen

Engineering Contradiction:
Improveauthorization accuracyVSAvoidsystem performance
Core Design Contradiction:
Measurement precisionVSProductivity

Solution Approach 1:

The patent applies local quality by updating only the specific portions of explosion tables that are affected by hierarchical database modifications. Rather than performing full table updates, the system identifies and updates only the relevant authorization records corresponding to the modified hierarchy levels and object instances. This selective updating maintains authorization accuracy while preserving system performance and processing efficiency.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent implements partial action by performing authorization evaluations and explosion table updates only to the extent necessary for the specific modification event. The system evaluates authorization rules partially, updating only the minimum required portions of explosion tables to maintain authorization accuracy, thereby avoiding the performance degradation that would result from complete or excessive updates.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS11086844B2Unified instance authorizations with application owned hierarchies
Publication Date: 2021.08.10 SAP SE
  • US11086844B2 patent drawing
  • US11086844B2 patent drawing
  • US11086844B2 patent drawing

AI summary

Systems, methods, and computer programmable products are described herein for tracking modifications of a hierarchical database table of an application. Data including a modification to the hierarchical database table having a plurality of database entries is received. A change trigger table having a record corresponding to the modification of a database entry of the plurality of database entries is defined. The change trigger table is provided to a unified instance authorization application for further definition of an explosion database table.