API Accelerator Fast Path Bypassing Authentication Overhead
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
API management platforms face performance bottlenecks due to the need for API invoke requests to go through lengthy authentication and authorization processes, even within trusted systems, which slows down response times and hampers customer experience.
Innovation Solution
Implementing an accelerator that records and utilizes a fast path for API invoke requests, bypassing the API management device by directly connecting the service consumer and provider with pre-registered connection information, reducing the need for complex authentication and authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If API invoke requests go through the API management device for authentication and authorization, then security and access control are ensured, but response time increases and performance decreases
Solution Approach 1:
The patent applies preliminary action by pre-establishing trust relationships and registering fast path connection information between service consumers and providers before actual API invocations. The accelerator device stores pre-validated connection information, allowing subsequent requests to bypass the API management device's authentication and authorization processes entirely, thus resolving the contradiction between security verification and response speed.
2Ease of operation
If API invoke requests go through the API management device, then usage policies and access control are enforced, but the processing path becomes lengthy and productivity decreases
Solution Approach 1:
The patent applies segmentation by dividing the API request processing into two distinct paths: a standard path through the API management device for initial policy establishment and access control, and a fast path through the accelerator device for subsequent validated requests. This segmentation allows the system to maintain access control enforcement while significantly improving processing throughput for trusted service interactions.
Solution Approach 2:
The accelerator device serves as an intermediary that caches pre-validated connection information and fast path routing data. It mediates between the service consumer and provider by directly forwarding requests that match cached entries, bypassing the API management device's policy enforcement overhead while maintaining security through pre-established trust relationships.
3Reliability
If complex authentication and authorization processes are performed for each API request, then security is maintained, but waiting time increases and customer experience deteriorates
Solution Approach 1:
The patent performs authentication and authorization actions preliminarily by establishing trust relationships and validating access permissions before actual API service interactions. The accelerator device stores these pre-validated connection information, enabling subsequent requests to be processed immediately without repeating authentication and authorization steps, thus eliminating waiting time while maintaining security.
Data Source
AI summary
Embodiments of the present invention provide methods, computer program products, and systems. Embodiments of the present invention can receive an application processing interface (API) invoke request for a service to be directed to an API management device. Embodiments of the present invention can then determine that there is a fast path to a service provider for the service requested by the API invoke request according to a fast path record in an accelerator. Embodiments of the present invention can then send the API invoke request to the service provider through the fast path based on the service provider's connection information.