Authentication System Selection via Gateway Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication systems are limited to using a single homogeneous authentication system for all access requests, failing to accommodate the need for multiple authentication systems to handle different access requests effectively, leading to confusion and inefficiency.
Innovation Solution
Deploying multiple authentication systems within a micro service framework as independent micro service components, allowing for the selection of a target authentication system based on identification information and authentication system selection policies, ensuring each access request is accurately routed to the appropriate system for authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a single homogeneous authentication system is used for all access requests, then the system structure is simple and easy to manage, but it cannot accommodate different authentication requirements for different access requests, leading to confusion and inefficiency
Solution Approach 1:
The authentication system is segmented into multiple independent authentication systems, each capable of handling specific types of authentication requests. The gateway device divides incoming access requests and routes them to appropriate authentication systems based on identification information, allowing each subsystem to specialize in particular authentication scenarios while maintaining overall system adaptability.
Solution Approach 2:
The gateway device serves as an intermediary between access requests and multiple authentication systems. It receives access requests, determines the appropriate authentication system based on identification information in the requests, and forwards requests to the selected authentication system. This mediator approach enables the system to handle diverse authentication requirements without requiring each authentication system to be directly accessible by all clients.
2Productivity
If multiple authentication systems are deployed to handle different access requests, then authentication efficiency and accuracy improve, but system complexity increases and management becomes more difficult
Solution Approach 1:
The gateway device is designed with multi-functionality, serving as both a request receiver and an intelligent router. It can handle various types of access requests, extract identification information from different request formats, consult the authentication system selection policy, and route requests to appropriate authentication systems. This universal gateway reduces the need for multiple specialized routing components, thereby managing complexity while maintaining high authentication efficiency.
Solution Approach 2:
The authentication system selection policy is pre-configured with mapping relationships between identification information and authentication systems. Before actual authentication requests arrive, the system establishes these routing rules in advance, allowing the gateway to quickly determine the appropriate authentication system without complex real-time decision-making. This preliminary setup of routing policies significantly improves authentication efficiency while keeping the runtime system relatively simple.
3Adaptability or versatility
If authentication systems are deployed as independent micro service components, then system flexibility and maintainability improve, but deployment and coordination complexity increases
Solution Approach 1:
Authentication systems are segmented into independent micro service components, each deployed separately and capable of autonomous operation. This segmentation allows individual authentication systems to be developed, deployed, and maintained independently, improving system flexibility and adaptability. The gateway device coordinates these micro services through standardized interfaces, managing the complexity of multiple independent components.
Solution Approach 2:
While authentication systems are segmented into micro services, the gateway device merges the coordination and routing functions into a single centralized component. This merging approach simplifies deployment by consolidating the complex coordination logic in one place rather than distributing it across all micro services, thereby improving ease of deployment while maintaining the flexibility benefits of micro service architecture.
Data Source
AI summary
Implementations of this disclosure provide an authentication system for handling authentication requests. An example method performed by a server includes receiving an access request that includes identification information to be used by the server for selecting a target authentication system, and determining that the access request does not have access permission. In response to determining that the access request does not have access permission, the server selects the target authentication system from at least two authentication systems, based on a predetermined authentication system selection policy and based on the identification information in the access request, and sends the access request to the selected target authentication system for authentication.