Versatile Access Control System Using Boolean Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems are limited to a single or limited number of authentication protocols, lacking flexibility and versatility in supporting various authentication methods.
Innovation Solution
An access control system that employs a plurality of authorities, access control elements, and tables to authenticate methods through Boolean combinations of proof of knowledge operations and credentials, allowing for flexible and extensible authentication protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If access control systems use fixed authentication protocols, then system simplicity is maintained, but authentication versatility is limited
Solution Approach 1:
The access control system implements a universal authentication framework that can handle multiple authentication protocols (password-based, public key, symmetric key, HMAC) through a single unified structure. The system uses a generic authority table and access control element framework that can accommodate different proof of knowledge operations without requiring separate dedicated systems for each authentication method, thereby achieving multi-functionality while maintaining relative system simplicity.
Solution Approach 2:
The system achieves versatility by allowing parameter changes in the authentication configuration rather than requiring structural changes to the core system architecture. The authority table can be configured to support different proof of knowledge operations and credentials by changing parameters such as the type of proof operation and associated credentials, enabling the same system structure to adapt to different authentication requirements without increasing fundamental system complexity.
2Adaptability or versatility
If multiple authentication protocols are integrated, then authentication versatility is improved, but system complexity increases
Solution Approach 1:
The system segments the authentication functionality into distinct modular components: an authority table that defines authentication parameters, access control elements that specify Boolean combinations of authorities, and a credential verification mechanism. This segmentation allows each component to handle specific authentication aspects independently, making the integration of multiple protocols manageable and reducing overall system complexity through modular organization.
Solution Approach 2:
The access control element acts as an intermediary between the diverse authentication protocols and the final access decision. It translates different proof of knowledge operations into a unified Boolean combination of authorities, serving as a mediator that harmonizes multiple authentication approaches into a consistent access control framework, thereby managing complexity through abstraction.
Data Source
AI summary
An access control system and method are provided, which include a plurality of authorities, a plurality of access control elements and an access control list. Each authority associates at least one of a plurality of proof of knowledge operations with at least one of a plurality of proof of knowledge credentials. Each access control element identifies a Boolean combination of at least one of the authorities. The access control list identifies one or more of the access control elements by which a method to be executed can be authenticated.