Interoperable Usage Management Framework for Resource Policy Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems face challenges in managing resource usage policies across multiple computing environments, particularly in open, distributed settings like the Internet, where traditional access control and digital rights management mechanisms fail to ensure interoperability and flexibility due to the use of different policy languages and the complexity of mashup applications.
Innovation Solution
A framework for usage management that employs a calculus to develop a generic license language, allowing for dynamic interpretation and enforcement of usage control specifications across various environments, separating access control and usage control, and enabling interoperability through standardized operational semantics and hierarchical context and license structures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional access control and digital rights management mechanisms are used in closed computing environments, then resource usage policy control is maintained, but interoperability across multiple computing environments fails
Solution Approach 1:
The patent segments the usage policy into two distinct parts: a usage control specification (UCL) that defines the resource usage constraints, and an access control specification (ACL) that handles authentication and authorization. This segmentation allows the UCL to be environment-agnostic while the ACL can be adapted to specific computing environments, thereby resolving the contradiction between maintaining policy control and achieving interoperability.
Solution Approach 2:
The patent introduces a usage control mechanism that acts as an intermediary between the resource owner and the computing environment. This intermediary interprets and enforces the usage control specification independently of the specific computing environment, enabling interoperability while maintaining reliable resource usage policy control through the standardized UCL framework.
2Adaptability or versatility
If different policy languages are used in various computing environments, then each environment can express its specific requirements, but interoperability and standardization fail
Solution Approach 1:
The patent creates a universal usage control specification framework that can express resource usage constraints in a standardized manner across different computing environments. The UCL uses a unified syntax and semantics that works across environments, eliminating the need for multiple different policy languages while still allowing environment-specific requirements to be expressed through the same standardized framework.
3Adaptability or versatility
If translation mechanisms are used to translate entire policies between different languages, then interoperability is attempted, but the process becomes infeasible and difficult
Solution Approach 1:
Instead of translating entire policies between different languages, the patent segments the policy into usage control and access control components. The usage control specification uses a standardized framework that eliminates the need for translation, while only the access control portion needs to be adapted to specific environments. This segmentation makes the system feasible and avoids the complexity of full policy translation.
4Device complexity
If complex policy specification languages are standardized as universal standards, then complete policy language standardization is achieved, but innovation and flexibility are stifled
Solution Approach 1:
The patent segments the policy specification into a standardized usage control component and a flexible access control component. The UCL provides the necessary standardization for interoperability, while the ACL portion remains flexible and can be customized or innovated upon for different environments. This segmentation maintains standardization where needed while preserving flexibility and innovation where appropriate.
Data Source
AI summary
Generic rights expression language allowing interoperability across different computing environments including resource usage of different applications. A formal framework for usage management provides scaffolding upon which interoperable usage management systems can be built. Certain features of the framework are standardized, such as the operational semantics, including areas free of standards that necessitate choice and innovation to achieve a balance of flexibility and usability for interoperability in usage management systems.


