Time-limited access to configuration settings
AssigneeARM IP Limited
InventorMilosch Meriac
Life of this patent
Estimating the term…
Abstract
Broadly speaking, embodiments of the present techniques provide methods and apparatus to implement a time-limited configuration settings hierarchy. The time-limited configuration settings hierarchy introduces a temporary override setting that allows a fail-back to a prior setting after the expiry of a time period. This allows temporary users of IoT devices to have much higher levels of privilege over configuration settings, as an automatic revocation of the permission and reversion to the previous settings is guaranteed on the expiry of the specified time period.
Claims10
A machine-implemented method of controlling prioritized temporary access to a configuration setting of a subordinate device in a network of electronic devices by a configuration control interface device, the method comprising:
- receiving, at the configuration control interface device from an access control list (ACL) component, a configuration data ACL specifying access rights to the configuration setting for one or more entities wherein the configuration setting is to control the operation of the subordinate device, the configuration data ACL further specifying a default setting for the configuration setting;
- applying, with the configuration control interface device, the configuration data ACL to the subordinate device to control the operation of the subordinate device in accordance with the default setting specified in the configuration data ACL;
- sending, from the configuration control interface device to the ACL component, a request to define the configuration setting for a specified time period;
- receiving, at the configuration control interface device from the ACL component, a first updated configuration data ACL comprising a time-limited parameter to define the configuration setting for the specified time period;
- and
- applying, with the configuration control interface device, the first updated configuration data ACL to the subordinate device to control the operation of the subordinate device in accordance with the configuration setting defined by the time-limited parameter;
- sending, from the configuration control interface device to the ACL component, a request to revoke the configuration setting before expiry of the specified time period;
- receiving, at the configuration control interface device from the ACL component, a second updated configuration data ACL to revoke said time-limited override parameter before expiry of said specified time period, the second updated configuration data ACL specifying the default setting for the configuration setting;
- applying, with the configuration control interface device, the second updated configuration data ACL to the subordinate device to control the operation of the subordinate device in accordance with the default setting.
An electronic system operable to control prioritized temporary access to a configuration setting of a subordinate device in a network of electronic devices, comprising:
- a first electronic component operable to:
- receive, from an access control list (ACL) component, a configuration data ACL specifying access rights to the configuration setting for one or more entities, wherein the configuration setting is to control the operation of the subordinate device, the configuration data ACL further specifying a default setting for the configuration setting;
- apply the configuration data ACL to the subordinate device to control the operation of the subordinate device in accordance with the default setting specified in the configuration data ACL;
- send, to the ACL component, a request to define the configuration setting for a specified time period;
- receive, from the ACL component, a first updated configuration data ACL comprising a time-limited parameter to define the configuration setting for the specified time period;
- apply the first updated configuration data ACL to the subordinate device to control the operation of the subordinate device in accordance with the configuration setting defined by the time-limited parameter;
- send, to the ACL component, a request to revoke the configuration setting before expiry of the specified time period;
- receive, from the ACL component, a second updated configuration data ACL to revoke said time-limited override parameter before expiry of said specified time period, the second updated configuration data ACL specifying the default setting for the configuration setting;
- apply the second updated configuration data ACL to the subordinate device to control the operation of the subordinate device in accordance with the default setting.
A computer program product comprising a non-transitory readable storage medium comprising computer program code executed by a computer system to cause said computer system to perform the following steps:
- receiving, at the configuration control interface device from an access control list (ACL) component, a configuration data ACL specifying access rights to the configuration setting for one or more entities wherein the configuration setting is to control the operation of the subordinate device, the configuration data ACL further specifying a default setting for the configuration setting;
- applying, with the configuration control interface device, the configuration data ACL to the subordinate device to control the operation of the subordinate device in accordance with the default setting specified in the configuration data ACL;
- sending, from the configuration control interface device to the ACL component, a request to define the configuration setting for a specified time period;
- receiving, at the configuration control interface device from the ACL component, a first updated configuration data ACL comprising a time-limited parameter to define the configuration setting for the specified time period;
- and
- applying, with the configuration control interface device, the first updated configuration data ACL to the subordinate device to control the operation of the subordinate device in accordance with the configuration setting defined by the time-limited parameter;
- sending, from the configuration control interface device to the ACL component, a request to revoke the configuration setting before expiry of the specified time period;
- receiving, at the configuration control interface device from the ACL component, a second updated configuration data ACL to revoke said time-limited override parameter before expiry of said specified time period, the second updated configuration data ACL specifying the default setting for the configuration setting;
- applying, with the configuration control interface device, the second updated configuration data ACL to the subordinate device to control the operation of the subordinate device in accordance with the default setting.
Dependencies are inferred from the claim text.