17932905. SCALABLE ACCESS CONTROL MECHANISM simplified abstract (Dell Products L.P.)

From WikiPatents
Jump to navigation Jump to search

SCALABLE ACCESS CONTROL MECHANISM

Organization Name

Dell Products L.P.

Inventor(s)

Ching-Yun Chao of Austin TX (US)

Timothy Gilman of Cross Plains TN (US)

SCALABLE ACCESS CONTROL MECHANISM - A simplified explanation of the abstract

This abstract first appeared for US patent application 17932905 titled 'SCALABLE ACCESS CONTROL MECHANISM

Simplified Explanation

The patent application describes a system that manages permissions for user accounts to access resources based on first and second associations stored in separate data stores.

  • The system maintains a first data store for first associations between subjects and attributes, and a second data store for second associations between attributes and permissions.
  • When a query is received for a user account and a resource, the system determines first permissions for the user account based on the first data store and the context of the user account.
  • The system also determines second permissions from the second data store that are required to access the resource given the context.
  • By comparing the first and second permissions, the system decides whether to approve the query and responds accordingly.

---

      1. Potential Applications
  • Access control systems
  • Data security platforms
      1. Problems Solved
  • Managing permissions for user accounts efficiently
  • Ensuring secure access to resources based on context
      1. Benefits
  • Improved data security
  • Streamlined access control processes
      1. Potential Commercial Applications
        1. Enhanced Access Control Solutions
      1. Possible Prior Art

No prior art is known at this time.

---

      1. Unanswered Questions
        1. How does the system handle conflicts between first and second permissions?

The abstract does not provide details on how conflicts between different sets of permissions are resolved within the system.

        1. What types of resources can be accessed using this system?

The abstract does not specify the range of resources that can be managed and accessed through the system.


Original Abstract Submitted

A system can maintain a first data store that stores first associations between subjects and first attributes, and a second data store that stores second associations between second attributes and permissions. The system can receive a query that identifies a user account and a resource. The system can determine, from the first data store and a context of the user account in initiating the query, first permissions for the user account with respect to the resource and given the context. The system can determine, from the second data store and the context, second permissions that are a precondition to access the resource given the context. The system can determine, based on whether there is an overlap between the first permissions and the second permissions, whether to approve the query. The system can respond to the query based on a result of the determining whether to approve the query.