Action Links for Secure Third-Party Workflow Integration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems lack an efficient method to integrate third-party business workflows directly into social feeds, requiring users to manually authenticate and expose authentication credentials, which is insecure and cumbersome.

Innovation Solution

The implementation of action links and action-link-groups within social feeds, using JSON for descriptive specification, encapsulating APIs and authentication tokens, allowing secure, granular access to third-party systems without exposing credentials, and enabling easy deployment and authentication on a server-side basis.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If users manually authenticate to third-party systems, then access to business workflows is achieved, but authentication credentials are exposed and security is compromised

Engineering Contradiction:
Improveaccess to business workflowsVSAvoidauthentication security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces action links as an intermediary mechanism between social feed users and third-party systems. These action links encapsulate authentication credentials and business logic, allowing users to access workflows without directly handling credentials. The action link server acts as a mediator that manages authentication tokens and translates social feed interactions into authenticated API calls to external systems.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If authentication credentials are exposed for direct access, then ease of integration is improved, but system security deteriorates

Engineering Contradiction:
Improveintegration capabilityVSAvoidcredential exposure risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements nesting by embedding authentication credentials and business logic within action links, which are themselves embedded in social feed posts. The action link structure contains nested elements including API endpoints, authentication tokens, and workflow parameters. This nested architecture allows credentials to be securely packaged and delivered only when needed, without exposing them in the broader system.

Inventive Principle:
Principle #7Nested doll (Nesting)

Solution Approach 2:

The system performs preliminary authentication by pre-configuring action links with valid authentication tokens and credentials before they are encountered by users. The action link server validates and refreshes tokens in advance, so that when users interact with action links in social feeds, the authentication is already established and credentials never need to be exposed during runtime operations.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If complex authentication mechanisms are implemented, then security is improved, but deployment complexity increases

Engineering Contradiction:
Improveauthentication securityVSAvoiddeployment complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the complex authentication logic from the deployment process and centralizes it in the action link server. Individual applications and social feed platforms no longer need to implement their own authentication mechanisms - they simply integrate with the action link server's standardized interface. This extraction moves cryptographic operations, token management, and credential validation to a dedicated service, simplifying deployment across multiple platforms while maintaining robust security.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS10341279B2Action links
Publication Date: 2019.07.02 SALESFORCE INC
  • US10341279B2 patent drawing
  • US10341279B2 patent drawing
  • US10341279B2 patent drawing

AI summary

The technology disclosed includes a method for initiating a web service through an action item within a post in a social media network. A request is received from a user for a post to a social network. The request includes a definition for an action-link-group, which comprises one or more action links. The post is created to include the action-link-group and is then uploaded to the network. Upon receiving a selection of an action link within the action-link-group, an action item associated with the action link is performed.