Workflow Attestation With Scoped Access Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems rely on static role-based or attribute-based access control, which limits flexibility and dynamic access management, particularly in scenarios where support agents need temporary access to secure resources for customer assistance.
Innovation Solution
A system that generates access tokens based on dynamic access parameters, allowing verified users to access secure resources, including the ability to grant access to secondary users and limiting access to specific subsets of resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional static role-based or attribute-based access control is used, then access management is simple and reliable, but flexibility and dynamic access management capability are reduced
Solution Approach 1:
The patent implements dynamic access control by generating access tokens on-demand based on workflow context rather than using static role-based permissions. The system dynamically evaluates access requests against workflow-defined criteria and generates scoped access tokens that grant temporary, context-specific access to secure resources, enabling flexible access management that adapts to varying support scenarios.
Solution Approach 2:
The system changes access control parameters from static roles to dynamic workflow-based parameters. Access is granted based on configurable parameters such as workflow type, customer segment, resource scope, and time validity, allowing the access control system to adapt its behavior based on the specific support engagement context rather than fixed organizational roles.
2Ease of operation
If access is granted to the entire support team, then ease of operation is improved, but security and access control precision deteriorate
Solution Approach 1:
The patent applies local quality by scoping access to specific subsets of secure resources rather than granting blanket access to the entire support team. Each access token is configured with precise scope parameters defining the exact resources, workflows, and time period the holder may access, thereby reducing security risk while maintaining operational ease through automated token generation.
Solution Approach 2:
The system segments access control into fine-grained, scope-defined access tokens rather than using broad team-wide permissions. Each token represents a discrete, limited-access authorization that can be independently managed and revoked, allowing the system to maintain security by limiting the impact of any single compromised credential while keeping the user experience simple.
3Object-affected harmful factors
If access is limited to specific context only, then security is improved, but flexibility for support agents deteriorates
Solution Approach 1:
The access token system provides universality by enabling support agents to access multiple different secure resources and workflows through a single unified mechanism. The same token generation process can grant access to various customer areas, billing systems, or support tools depending on the workflow context, maintaining flexibility while preserving security through scoped, context-aware authorization.
Data Source
AI summary
A computer implemented method for granting access to secure resources, the method including receiving at a computer system from a secondary computing device, a ticket providing access parameters for a secure resource; receiving an access request for the secure resource from a verified user; confirming that the access request complies with the access parameters provided by the ticket; and generating an access token, the access token usable by the verified user for accessing the secure resource.