Multi-tenant API Login Authentication via Load Balancer Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing API login models in multi-tenant database environments face scalability issues and increased latency as the size and complexity of datacenters grow, leading to overwhelmed authentication systems and inconsistent results due to the inability to handle non-HTML based login requests efficiently.

Innovation Solution

Implementing a system where API login requests are distributed across redundant instances within a datacenter using a load balancer, with recursive query algorithms that proxy failed lookup requests to other datastores within the same datacenter and geographically distinct regions, minimizing cross-datacenter transactions and reducing latency.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If API login requests are processed by a single authenticating system, then the system structure is simple, but the system becomes overwhelmed and experiences increased latency as request volume increases

Engineering Contradiction:
Improvesystem structureVSAvoidlatency
Core Design Contradiction:
Device complexityVSLoss of time

Solution Approach 1:

The patent segments the authentication system into multiple independent authenticating systems distributed across different datacenters. Each datacenter handles a portion of the authentication requests, dividing the computational load and preventing any single system from becoming overwhelmed. This segmentation maintains structural simplicity at the individual system level while improving overall performance through distribution.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a geographic dimension to the authentication architecture by distributing systems across multiple datacenters in different locations. This spatial distribution allows the system to handle increased request volumes without proportionally increasing latency, as requests can be routed to nearby or less-loaded datacenters, adding a geographic dimension to load management.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Ease of operation

If authentication requests are handled by a simple processing system, then the system is easy to operate, but the system cannot scale as request volume and organizational complexity increase

Engineering Contradiction:
Improvesystem operationVSAvoidscalability
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent creates a universal authentication framework that can handle multiple types of authentication requests (HTML-based and non-HTML-based) through a common architecture. The system uses standardized protocols and interfaces that work across different datacenters and organizational structures, making the system both easy to operate and highly scalable. The load balancer provides a unified entry point that abstracts away the complexity of the distributed architecture.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent implements dynamic load balancing that automatically adjusts request routing based on current system conditions, datacenter capacity, and organizational requirements. This dynamic behavior allows the system to scale flexibly with increasing request volumes and organizational complexity without requiring manual reconfiguration, maintaining ease of operation while adapting to changing demands.

Inventive Principle:
Principle #15Dynamics

3Productivity

If lookup requests are processed within a single datacenter, then cross-datacenter transactions are minimized, but the system cannot handle requests that require data from multiple datacenters

Engineering Contradiction:
Improverequest processing efficiencyVSAvoiddata access capability
Core Design Contradiction:
ProductivityVSAdaptability or versatility

Solution Approach 1:

The patent introduces a load balancer as an intermediary that coordinates lookup requests across multiple datacenters. When a request requires data from multiple datacenters, the load balancer manages the coordination and aggregation of results, transparently handling the complexity of cross-datacenter transactions. This intermediary approach maintains high productivity for local requests while enabling versatile data access across the distributed system.

Inventive Principle:
Principle #24Intermediary (Mediator)

4Device complexity

If the authentication system processes all incoming requests sequentially, then the system logic is simple, but the system becomes a single point of failure and cannot keep up with demand

Engineering Contradiction:
Improvesystem logicVSAvoidsystem availability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent segments the authentication processing across multiple independent systems in different datacenters, eliminating the single point of failure. Each datacenter can independently process authentication requests, and if one system fails, others continue to operate. This segmentation increases system logic complexity slightly but dramatically improves reliability and availability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements feedback mechanisms where the load balancer monitors the status and performance of authenticating systems across datacenters, dynamically routing requests away from failed or overloaded systems. This feedback-driven approach maintains simple overall system logic while improving reliability through automatic failure detection and recovery.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS8676979B2Methods and systems for efficient API integrated login in a multi-tenant database environment
Publication Date: 2014.03.18 SALESFORCE INC
  • US8676979B2 patent drawing
  • US8676979B2 patent drawing
  • US8676979B2 patent drawing

AI summary

Methods and systems for efficient API integrated login in a multi-tenant database environment and for decreasing latency delays during an API login request authentication including receiving a plurality of API login requests at a load balancer of a datacenter, where each of the plurality of API login requests specify a user identifier (userID) and/or an organizational identifier (orgID), fanning the plurality of API login requests across a plurality of redundant instances executing within the datacenter, assigning each API login request to one of the plurality of redundant instances for authentication, and for each of the respective plurality of API login requests, performing a recursive query algorithm at the assigned redundant instance, at one or more recursive redundant instances within the datacenter, and at a remote recursive redundant instance executing in a second datacenter, as necessary, until the login request is authenticated or determined to be invalid.