Anonymous Account Authentication Policy Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Cloud platforms face increased authentication operation load and reduced efficiency due to the large number of authentication policies for anonymous accounts, leading to high time and system resource consumption.

Innovation Solution

An anonymous account authentication method and server that utilize a first version number to obtain a linear policy table, allowing for efficient authentication by matching it with a second version number, thereby reducing the need to traverse multiple authentication policies and optimizing resource usage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If authentication policies for anonymous accounts are stored in a unified way with ordinary accounts, then the authentication system can handle both account types, but the authentication operation load increases and efficiency decreases due to traversing many resource owners' policies

Engineering Contradiction:
Improveauthentication system capabilityVSAvoidauthentication operation efficiency
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent segments authentication policies into two separate storage structures: a first authentication policy table for anonymous accounts and a second authentication policy table for ordinary accounts. This segmentation allows the system to handle anonymous account authentication independently without traversing all resource owners' policies, thereby reducing authentication operation load and improving efficiency while maintaining the capability to authenticate both account types.

Inventive Principle:
Principle #1Segmentation

2Reliability

If the server traverses authentication policies of many resource owners for anonymous account authentication, then comprehensive authentication can be performed, but time and system resources are consumed excessively

Engineering Contradiction:
Improveauthentication completenessVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent performs preliminary action by pre-storing authentication policies for anonymous accounts in a dedicated first authentication policy table before authentication operations occur. This allows the server to directly retrieve policies without traversing multiple resource owners during authentication, maintaining comprehensive authentication coverage while significantly reducing authentication time and system resource consumption.

Inventive Principle:
Principle #10Preliminary action

3Device complexity

If unified authentication policy storage is used, then system structure is simplified, but authentication operation load increases and system performance decreases

Engineering Contradiction:
Improvesystem structureVSAvoidsystem performance
Core Design Contradiction:
Device complexityVSProductivity

Solution Approach 1:

The patent divides the authentication policy storage into separate tables for anonymous and ordinary accounts. Although this increases structural complexity compared to a unified table, it dramatically improves system performance by enabling direct policy retrieval for anonymous accounts without traversing all resource owners' policies, thus resolving the contradiction between structure simplicity and performance.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS11394748B2Authentication method for anonymous account and server
Publication Date: 2022.07.19 TENCENT TECHNOLOGY (SHENZHEN) CO LTD
  • US11394748B2 patent drawing
  • US11394748B2 patent drawing
  • US11394748B2 patent drawing

AI summary

Provided is an anonymous account authentication method, apparatus and storage medium. The method may include receiving, from a user, an anonymous account authentication request, requesting a resource owner to perform authentication on a use permission of a resource using an anonymous account, obtaining a first version number of the resource owner according to the anonymous account authentication request, the first version number representing an identification number of a current version of an authentication policy table, obtaining a linear policy table based on the first version number matching a second version number, the second version number representing an identification number of a current version of the linear policy table, obtaining an authentication policy set associated with the resource from the linear policy table, and performing authentication by using the authentication policy set, the authentication policy set comprising at least one authentication policy.