A Database-Independent LLM Framework for Real-Time Authorization in Retrieval-Augmented Generation
The 40th Annual AAAI Conference on Artificial Intelligence, Singapore, Singapore, 20 January - 27 March 2026, pp.1-8, (Full Text)
- Publication Type: Conference Paper / Full Text
- City: Singapore
- Country: Singapore
- Page Numbers: pp.1-8
- Open Archive Collection: AVESIS Open Access Collection
- Dokuz Eylül University Affiliated: Yes
Abstract
Retrieval-Augmented Generation (RAG) systems have become effective tools for improving language model capabilities by integrating external knowledge. However, these systems face significant security problems when handling sensitive information, particularly concerning unauthorized data access. This paper presents a new access-controlled RAG framework that includes dynamic security measures without needing manual database construction or extensive preprocessing of user-specific document collections. Our approach uses three specific knowledge bases and advanced language models to make real-time access control decisions. Experimental testing on a dataset of 167 posters from six organizations—University of Antwerp, Flanders Make, University of Ghent, University of Hasselt, KU Leuven, and VUB—shows 93% overall accuracy in access control decisions, with 92% accuracy for text-based control and 78% for image-based control. The framework enables quick deployment of secure RAG systems while maintaining efficiency and responsiveness.