Authentication Server Token Generation and Storage Optimization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In single sign-on systems, the current method of replicating sessions across authentication servers in a cluster leads to high data transmission and storage resource consumption, as well as inefficient use of storage resources, due to the need for each server to store sessions of all users.
Innovation Solution
A token generation and authentication method where the first authentication server generates a token with identification and token addressing information, allowing the authentication server cluster to correctly authenticate tokens without replicating sessions across servers, by using token addressing information to direct authentication requests to the correct server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sessions are replicated across all authentication servers in the cluster, then token authentication can be performed correctly, but data transmission resources and storage resources are greatly consumed
Solution Approach 1:
The patent extracts the token storage function from the authentication server cluster by introducing an external storage system (database or file system). Each authentication server only stores tokens it generates, while the centralized storage system holds all tokens for authentication. This separation eliminates the need for session replication across servers, significantly reducing storage resources while maintaining correct token authentication.
Solution Approach 2:
The patent introduces a centralized storage system as an intermediary between authentication servers and the token storage function. This intermediary handles the token persistence and retrieval operations, allowing authentication servers to focus on token generation and validation without needing to replicate sessions. The intermediary decouples the authentication logic from the storage requirements.
2Reliability
If sessions are replicated across all authentication servers in the cluster, then token authentication can be performed correctly, but data transmission resources are greatly consumed
Solution Approach 1:
The patent extracts the token storage function from the authentication server cluster by introducing an external storage system (database or file system). Each authentication server only stores tokens it generates, while the centralized storage system holds all tokens for authentication. This separation eliminates the need for session replication across servers, significantly reducing storage resources while maintaining correct token authentication.
Solution Approach 2:
The patent introduces a centralized storage system as an intermediary between authentication servers and the token storage function. This intermediary handles the token persistence and retrieval operations, allowing authentication servers to focus on token generation and validation without needing to replicate sessions. The intermediary decouples the authentication logic from the storage requirements.
3Reliability
If each authentication server stores sessions of all users, then token authentication can be performed, but storage resources are inefficiently used
Solution Approach 1:
The patent extracts the token storage function from the authentication server cluster by introducing an external storage system (database or file system). Each authentication server only stores tokens it generates, while the centralized storage system holds all tokens for authentication. This separation eliminates the need for session replication across servers, significantly reducing storage resources while maintaining correct token authentication.
Solution Approach 2:
The centralized storage system serves multiple authentication servers simultaneously, providing a universal token storage service. This single storage system is accessed by all authentication servers, eliminating the need for each server to maintain its own complete session store. The universal storage approach improves resource efficiency while maintaining authentication capability across the entire cluster.
Data Source
Figure 1~2
Figure 3~5A
Figure 5B~6
AI summary
Embodiments of the present invention disclose a token generation and authentication method and an authentication server. The method includes: verifying, by a first authentication server, a login request of a user; and when the first authentication server successfully verifies the login request of the user, establishing, by the first authentication server, a session for the user and generating a token including identification information and token addressing information for the user, where the identification information is used to identify the session of the user, and the token addressing information is used to indicate a storage location of the token in an authentication server cluster. The first authentication server is located in the authentication server cluster. According to the embodiments of the present invention, data transmission resources and storage resources in the authentication server cluster can be reduced when the token is correctly authenticated.