Aggregated Authorization Token for Multi-Application Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Third-party provider authorization models require multiple tokens for each application, leading to increased storage, infrastructure, and network bandwidth costs, as well as complexity in managing and transmitting these tokens.
Innovation Solution
A system generates a single access token that aggregates permissions for multiple applications, allowing a third-party aggregator to use this token for all consented resources, reducing the need for multiple tokens and simplifying management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple OAuth tokens are issued for each fourth-party application, then authorization coverage is improved, but storage requirements increase
Solution Approach 1:
The patent combines multiple individual OAuth tokens into a single aggregated token that represents permissions for multiple fourth-party applications. The token aggregation service consolidates token data structures that include arrays of token information, allowing one token to substitute for many individual tokens while maintaining the same authorization capabilities.
Solution Approach 2:
The aggregated OAuth token serves multiple functions simultaneously - it can be used to access resources for multiple different fourth-party applications with a single token. The token data structure includes flexible fields that can represent different application permissions, making the token universal across multiple authorization contexts.
2Reliability
If multiple OAuth tokens are transmitted for each authorization request, then authorization completeness is improved, but network bandwidth consumption increases
Solution Approach 1:
The patent merges multiple token transmissions into a single aggregated token transmission. Instead of sending separate tokens for each application, the system transmits one aggregated token that contains embedded permission information for multiple applications, significantly reducing network bandwidth usage while maintaining complete authorization coverage.
3Measurement precision
If multiple OAuth tokens are managed separately, then authorization precision is improved, but device complexity increases
Solution Approach 1:
The patent introduces a token aggregation service as an intermediary between the OAuth service and fourth-party applications. This intermediary handles the complexity of managing multiple tokens by aggregating them into a single token, while maintaining the precision of individual authorization permissions through structured token data that preserves application-specific permission details.
Solution Approach 2:
The aggregated token uses a segmented data structure that divides token information into organized arrays and fields, where each segment represents permissions for a specific fourth-party application. This segmentation maintains authorization precision by keeping application-specific permissions distinct while allowing unified management through the single aggregated token.
4Productivity
If infrastructure is scaled to support multiple tokens, then system capacity is improved, but infrastructure cost increases
Solution Approach 1:
The patent merges the infrastructure requirements for managing multiple tokens into a single aggregated token system. By consolidating token storage, management, and transmission into one unified approach, the system maintains high capacity to support multiple applications while reducing the infrastructure resources needed compared to managing separate tokens for each application.
Data Source
AI summary
An application programming interface (API) call is received to obtain an access data object that indicates a permission of an application provider to access a resource of an entity. A previous permission to access a second resource of the entity is identified. As a result of receiving the API call, an access data object is generated to indicate the permission and the previous permission.