Usage Monitor for Computing Resource Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computer security approaches fail to detect and prevent abuses of authorized access to computing resources by users, as they are not equipped to monitor and manage usage constraints effectively.
Innovation Solution
A computer-implemented method and system that continuously monitors user actions on computing resources by applying usage rules to determine if they violate defined constraints, halting actions that do so until authorized by a supervisor, and notifying them for review.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If current authentication approaches are used, then users can access computing resources, but unauthorized abuse of authorized access cannot be detected or prevented
Solution Approach 1:
The system performs preliminary actions by establishing usage constraints and monitoring rules before users can abuse authorized access. The usage monitor is pre-configured with constraints that define acceptable usage patterns, enabling the system to detect and prevent abuses before they cause harm rather than relying on post-detection responses.
Solution Approach 2:
The usage monitor acts as an intermediary component between the authenticator and the computing resource. It intercepts and monitors user actions, applies usage constraints to evaluate whether actions are appropriate, and can halt unauthorized actions before they execute, thereby preventing abuse without requiring complete system redesign.
2Reliability
If usage monitoring is implemented to detect abuses, then security is improved, but system complexity increases
Solution Approach 1:
The access control system is segmented into distinct functional components: an authenticator that verifies user identities, a usage monitor that applies usage constraints to monitored actions, and a constraint evaluation mechanism. This segmentation allows each component to perform its specific function independently, making the overall system more manageable and maintainable despite the added monitoring capability.
Solution Approach 2:
The usage monitor serves multiple functions simultaneously: it monitors user actions, evaluates actions against usage constraints, detects potential abuses, and can halt unauthorized actions. This multi-functionality consolidates what could be multiple separate systems into a single versatile component, reducing overall system complexity while maintaining comprehensive security.
3Reliability
If actions are halted for supervisor authorization, then abuse is prevented, but productivity decreases due to additional authorization steps
Solution Approach 1:
The system applies local quality by differentiating between types of actions and applying different authorization requirements. Routine actions that comply with usage constraints can proceed without supervisor authorization, while only actions that violate constraints or exceed defined thresholds require additional authorization. This selective approach maintains productivity for legitimate actions while preventing abuses.
Solution Approach 2:
The usage monitor provides continuous feedback by monitoring user actions and comparing them against usage constraints in real-time. When an action complies with constraints, the system immediately allows it to proceed without interruption. Only when constraints are violated does the system interrupt and request supervisor authorization, minimizing productivity impact while maintaining security.
Data Source
AI summary
Systems and methods are provided for monitoring access of computing resources. Usage rules may be created and stored that define a usage constraint based on actions available to be performed at the computing resources. An authenticator may verify login credentials received from a user and authorize the user to access a computing resource. A request to perform an action at the computing resource may be received, and a usage monitor may apply a usage rule to the requested action. If the requested action violates the usage constraint of the usage rule, the usage monitor may halt performance of the requested action and notify another user of the usage constraint violation. The authenticator may receive and verify another set of login credentials from that other user. In response to successful verification of the additional set of login credentials, the usage monitor may resume performance of the requested action.