Application-Level Authentication for Low-Overhead Action Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for executing actions in cloud-based architectures face inefficiencies and security vulnerabilities due to reliance on digital certificates and third-party authentication, leading to increased resource consumption and potential fraud.
Innovation Solution
Implementing application-level multifactor authentication using client digital certificates and login credentials within the action execution application, eliminating the need for middleware layers and third-party validation, and allowing for finer-grained access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital certificate authentication with middleware layers is used, then identity authentication is achieved, but system complexity and cost increase
Solution Approach 1:
The patent extracts the authentication functionality from external middleware layers and third-party systems, implementing it directly within the action execution application. This eliminates the need for separate authentication infrastructure while maintaining security, directly resolving the contradiction between achieving reliable authentication and reducing system complexity
Solution Approach 2:
The action execution application performs its own authentication of clients directly, without relying on external authentication services. The application validates client digital certificates and credentials internally, making the system self-sufficient for authentication purposes while reducing dependency on complex external infrastructure
2Reliability
If third-party authentication systems are used, then authentication capability is provided, but resource consumption and processing time increase
Solution Approach 1:
The patent merges the authentication process with the action execution process by implementing authentication directly within the action execution application. This consolidation eliminates the need for separate authentication requests to third-party systems, reducing processing time and resource consumption while maintaining authentication capability
Solution Approach 2:
The action execution application validates client credentials and digital certificates in advance, before the action is executed. This preliminary authentication ensures that only authorized clients can execute actions, maintaining security while streamlining the overall process by preventing unnecessary authentication checks later
3Reliability
If digital certificate validation is performed, then client identity is verified, but computing resources are consumed
Solution Approach 1:
The patent implements a two-stage validation approach where the action execution application first performs a quick initial validation of client credentials, and only performs full digital certificate validation when necessary. This partial validation strategy reduces computing resource consumption while maintaining reliable client verification for critical operations
Data Source
AI summary
A system for conserving computing and memory resources and enhancing security by performing application-level multifactor level authentication of a client requesting execution of an action by the system. A request to execute an action sent by the client and received by an action execution application of the system may include compiled client authentication information. The compiled client authentication information may comprise at least a client digital certificate and client login credentials that are unique to the action execution application. The action execution application can authenticate the client relative to the requested action by validating the received client digital certificate against a stored set of previously validated digital certificates, in addition to validating the received client login credentials against a stored set of previously validated login credentials. In response to authenticating the client, the action execution application may execute the requested action.