Alias Directory for Distributed Credential Resolution

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Access interactions involving confidential access data are challenging due to security vulnerabilities and user difficulty in remembering complex credentials, necessitating more efficient methods, especially in distributed networks.

Innovation Solution

A directory server system that receives an alias resolve request, transmits it to multiple mapping computers, collects credentials or tokens, and determines a suitable credential or token for transaction processing, facilitating secure and efficient access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If confidential access data such as passwords or account numbers is used for secure access interactions, then security is improved, but the complexity of the access data increases making it difficult for users to remember and provide when needed

Engineering Contradiction:
ImprovesecurityVSAvoidease of remembering access data
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces an alias as an intermediary element that mediates between the user and the complex confidential access data. The alias serves as a simple, memorable identifier that the user provides, while the system internally resolves it to the actual confidential credential (password, account number, etc.). This resolves the contradiction by allowing users to interact with simple aliases rather than complex credentials, maintaining security through the underlying confidential data while improving ease of operation.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system creates a copy or representation of the confidential access data in the form of an alias. Instead of requiring users to directly handle and remember the complex original credential, the system generates and manages a simplified copy (the alias) that maps to the original credential through a resolution process. This copying mechanism allows users to work with the simplified representation while the system maintains and secures the original complex credential.

Inventive Principle:
Principle #26Copying

2Adaptability or versatility

If a distributed network system is used to manage access interactions, then system robustness and scalability are improved, but the complexity of managing and resolving credentials across multiple systems increases

Engineering Contradiction:
Improvedistributed network capabilityVSAvoidcredential management complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The alias resolution system is designed to be universal and work across multiple different systems, networks, and credential types. The alias acts as a system-agnostic identifier that can resolve to various kinds of credentials (passwords, account numbers, API keys, etc.) across different domains and platforms. This multi-functionality allows the distributed network to maintain consistency and simplicity at the user interface level while handling diverse credential types and system architectures underneath.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

In the distributed network context, the alias serves as a mediating layer that simplifies credential management across multiple systems. Rather than requiring direct integration and credential sharing between numerous distributed systems, the alias resolution mechanism provides a centralized coordination point that can resolve aliases to appropriate credentials across the distributed architecture, reducing the complexity of inter-system credential management.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12488125B2Alias directory
Publication Date: 2025.12.02 VISA INTERNATIONAL SERVICE ASSOCIATION
  • US12488125B2 patent drawing
  • US12488125B2 patent drawing
  • US12488125B2 patent drawing

AI summary

A method is disclosed and includes receiving an alias resolve request message comprising an alias from a transfer server, and then transmitting the alias resolve request message comprising the alias to plurality of mapping computers. Then, a plurality of alias resolve response messages are received from the plurality of mapping computers, the plurality of alias resolve response messages respectively comprising a plurality of credentials or tokens. A credential or token from the plurality of credentials or tokens is then determined and transmitted to transfer server computer. The transfer server computer conducts a transaction process using the determined credential or token.