Access Token Storage With Invalidation Flags for Request Efficiency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional systems require repeated requests for access tokens due to their expiration, leading to inefficient use of bandwidth and processing resources.
Innovation Solution
A system that stores access tokens with an associated invalidation flag, allowing reuse of valid tokens and reducing the need for immediate deletion, thereby optimizing bandwidth and processing efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of energy
If access tokens are stored and reused, then bandwidth and processing resources are saved, but invalid tokens may be mistakenly reused causing security issues
Solution Approach 1:
The patent segments the token management process into distinct states (valid and invalid) using invalidation flags. Instead of uniformly deleting all expired tokens, the system marks them with invalidation flags to distinguish between valid tokens that can be reused and invalid tokens that should be rejected, thereby resolving the contradiction between resource efficiency and security reliability
Solution Approach 2:
The patent changes the state parameter of tokens by introducing invalidation flags. Tokens transition from a simple binary state (valid/invalid) to a multi-state system where tokens can be marked as invalid without deletion. This parameter change allows the system to maintain tokens for future analysis while preventing their misuse, balancing resource savings with security
2Reliability
If access tokens are deleted immediately upon expiration, then security is maintained, but repeated requests must be made leading to inefficient resource use
Solution Approach 1:
The patent applies preliminary action by marking tokens as invalid before they are actually rejected. The invalidation flag is set when the token expires, allowing the system to prepare for future rejection while still maintaining the token in storage. This enables the system to distinguish between tokens that should be reused and those that should be rejected, improving request efficiency without compromising security
Solution Approach 2:
The system implements feedback mechanisms where rejection messages from the resource server are processed to update token validity states. When a token is rejected, the system receives feedback and updates the invalidation flag accordingly, creating a closed-loop system that adapts token management based on actual usage outcomes, thereby optimizing both security and efficiency
3Quantity of substance
If all expired tokens are deleted, then storage space is freed, but analysis of token expiration patterns is lost
Solution Approach 1:
The patent applies discarding and recovering by selectively discarding only the validity information of expired tokens while recovering and preserving other token data for analysis. Instead of deleting entire tokens, the system discards their active validity status through invalidation flags while retaining the tokens themselves in storage for future analysis, thus freeing functional storage space while preserving analytical information
Data Source
AI summary
A client system comprises processing circuitry configured to receive, from a user device, a first access request comprising a first instruction to access a protected resource; transmit a token request for an access token to be used for accessing the protected resource; and receive an access token in response to the token request, the access token having a corresponding time to expire. The client system comprises a token storage unit configured to store the access token. The processing circuitry is further configured to receive a rejection message indicating that the access token is not valid for receiving the protected resource; and store, at the token storage unit, an invalidation flag associated with the stored access token, in response to receiving the rejection message.