Zero-Trust Access Control Using Aggregation Covenants
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for decision-making in business and other situations lack the ability to effectively handle alternative points of view, as they do not readily facilitate the presentation of various potential structures or organizations reflecting different perspectives.
Innovation Solution
A system for securing resources in a computing system through entity aggregation, which includes user-type, data-type, and process-type entities, each with associated access and privilege information. This system uses an aggregation covenant to define computing environment capabilities and an aggregation rule configuration module to configure rules for entity aggregation, allowing members to perform computing operations with a combination of capabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional decision-making systems are used, then system simplicity is maintained, but the ability to handle alternative points of view is insufficient
Solution Approach 1:
The system segments decision-making capabilities into separate virtual machines, each representing a different point of view or perspective. These virtual machines are isolated entities that can independently process and present alternative viewpoints without interfering with each other, enabling the system to handle multiple perspectives simultaneously while maintaining clear structural boundaries.
Solution Approach 2:
The patent introduces a mediator component that manages the interaction between multiple virtual machines representing different points of view. This mediator coordinates the presentation of alternative perspectives, facilitates comparison between different viewpoints, and integrates their outputs into a comprehensive decision-making framework, thereby handling complexity through structured intermediation.
2Adaptability or versatility
If entity aggregation with multiple capabilities is implemented, then computing operation flexibility is improved, but access control complexity increases
Solution Approach 1:
The system merges access control policies from multiple entities into a unified aggregation covenant that governs the virtual machine. Instead of managing separate access controls for each entity, the patent combines their capabilities and restrictions into a single integrated policy framework, simplifying access control management while preserving the flexibility of individual entity capabilities.
Solution Approach 2:
The aggregation covenant serves as a universal access control mechanism that manages multiple entities simultaneously. This single policy structure handles diverse computing operations and access requirements from different entities through a unified interface, reducing access control complexity while maintaining versatile capability management.
Data Source
AI summary
Securing a file against user actions in a computer network includes processing a request for a file-directed action that identifies a user, a file, and a mode of file access. Generating a mediated covenant of association that defines constraints of the user action and is produced by node-by-node informatic convolution of a hierarchy of informational nodes present in profiles of the user, the file and the mode. Enforcing securing of the user actions with a computer security event-specific model based on an instance of trust derived from the covenant of association.