URL-Based Query Access Control for Selective Data Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data storage and access control systems waste computing resources by duplicating data when granting access to unauthorized users, as they require creating separate data resources to restrict access to sensitive information.
Innovation Solution
Implementing a URL associated with a query that filters out unauthorized access to specific data portions, allowing privileged users to share controlled access without duplicating data resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a separate data resource is created to grant access to unauthorized users, then access control is improved, but data storage resources are wasted due to duplication
Solution Approach 1:
The patent segments the data resource by using queries to filter and return only specific portions of data (e.g., certain rows, columns, or records) that the user is authorized to access. Instead of duplicating entire data resources, the system divides the data access into controlled segments through query-based filtering, allowing selective sharing without full duplication.
Solution Approach 2:
The patent introduces a URL with pre-authenticated query as an intermediary between the data resource and the user. This URL encapsulates the access control logic and query parameters, acting as a mediator that delivers filtered data portions without requiring the creation of separate data resources. The intermediary approach eliminates duplication while maintaining access control.
2Manufacturing precision
If multiple URLs with different query restrictions are created, then access control precision is improved, but system complexity increases
Solution Approach 1:
The patent makes the URL generation mechanism universal by allowing a single system to handle multiple levels of access control through different queries. The same URL generation process can create URLs with various query restrictions (different rows, columns, records) without requiring separate systems or complex configurations. This multi-functionality approach maintains precision while managing complexity.
Solution Approach 2:
The patent uses parameter changes in queries to achieve different levels of access control precision. By modifying query parameters (which columns to select, which rows to filter, what records to include), the system can precisely control data access without creating fundamentally different systems. The complexity is managed by changing parameters within a unified framework rather than adding system complexity.
Data Source
AI summary
A system for controlling access to data. The system includes an electronic processor configured to receive, from a first computing device, a first resource request using a uniform resource locator (URL) and identify a first data record, from a plurality of data records, corresponding to the URL. The electronic processor is also configured to identify, from the first data record, a first resource and a first user and verify access rights of the first user identified from the first data record to the first resource identified from the first data record. The electronic processor is further configured to, in response to verifying the access rights of the first user to the first resource, execute a first query identified from the first data record on the first resource to generate a first set of query results and transmit, to the first computing device, the first set of query results.