Access Manager Whitelist Construction via URL Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access manager systems, such as Oracle Access Manager, face challenges in maintaining an up-to-date and error-free whitelist of approved URLs for secure redirection after logout, requiring manual administration and being prone to errors due to the lack of validation of URL authenticity.
Innovation Solution
Implementing an access manager with machine learning capabilities to automatically construct and maintain a whitelist of validated URLs by learning from user actions and events, such as application registration and user interactions, thereby reducing the need for manual updates and enhancing security by validating redirection URLs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an administrator manually maintains a whitelist of approved end URLs, then the whitelist can be updated and managed, but it requires continuous manual effort and is prone to errors
Solution Approach 1:
The system automatically discovers, validates, and maintains the whitelist of approved end URLs without requiring manual administrator intervention. The access manager performs self-service by autonomously monitoring applications, validating URLs through authentication mechanisms, and updating the whitelist based on discovered legitimate endpoints.
Solution Approach 2:
The manual mechanical process of administrator maintenance is replaced with an automated electronic system that uses authentication requests and machine learning to dynamically generate and update the whitelist. This substitution eliminates human error and continuous manual effort while maintaining high accuracy.
2Adaptability or versatility
If the whitelist is manually maintained, then administrators can control approved URLs, but the whitelist may not always be up-to-date and may be incomplete
Solution Approach 1:
The system implements continuous feedback loops where the access manager monitors authentication requests, analyzes logout redirection patterns, and automatically updates the whitelist based on discovered legitimate end URLs. This feedback mechanism ensures the whitelist remains current and complete without manual intervention.
Solution Approach 2:
The system performs preliminary validation of end URLs by intercepting and analyzing authentication requests before users are redirected. By pre-validating URLs through authentication mechanisms and machine learning analysis, the system proactively builds an accurate and complete whitelist before security issues arise.
3Measurement precision
If administrators need to be aware of application URL nuances, then they can make informed decisions, but this increases complexity and time requirements
Solution Approach 1:
The system replaces the need for administrator expertise in understanding application URL nuances with automated machine learning algorithms and authentication-based validation. These electronic systems analyze URL patterns, authentication behaviors, and application protocols to achieve high validation accuracy without requiring human time investment.
Solution Approach 2:
The access manager acts as an intermediary between applications and the whitelist maintenance process. It intercepts authentication requests, analyzes URL validity through intermediate validation steps, and automatically updates the whitelist based on its analysis, eliminating the need for administrators to directly understand application-specific URL nuances.
4Productivity
If the access manager automatically constructs and maintains the whitelist using machine learning, then manual administration is reduced and errors are minimized, but the system complexity increases
Solution Approach 1:
The access manager performs multiple functions including authentication, authorization, and automatic whitelist maintenance using machine learning. By consolidating these diverse functions into a single multi-functional system, the patent achieves high productivity in whitelist maintenance while managing complexity through unified architecture rather than separate specialized systems.
Data Source
AI summary
Techniques are provided for of constructing a whitelist of redirection uniform resource locators (URLs). A method can include receiving, by a computing system executing an access manager application, a request to log out a user from an application executing on a device; determining, by the access manager application, a redirection address for the application; validating, by the access manager application, the redirection address; and based on the validation, causing, by the access manager application, the application to perform one of redirecting the user to the redirection address and determining addition of the redirection address to a list of valid redirection addresses.