Attorney Drive Access Model

Patent Claims — Reduction to Practice

• Per-attorney config profiles define allowed case prefixes, vault scope, and access level
• Single-session enforcement: new session blocked when another attorney is active
• SHA-256 session token from attorney ID + timestamp + system ID — stored outside database
• Vault path constructor scopes directory access to per-attorney lists
• Case access validator matches case ID against attorney allowed prefix list
• Access level validated against enumerated set: read-only, write-allowed, full-access
• Wildcard in allowed prefix list grants access to all case identifiers
• Session expiry enforced on every case access validation request
• Closing a session renames active session file to closed session file
• Fail-closed on any profile validation error