Authentication Rule Engine for Adaptive Access Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in coordinating authentication and authorization processes across multiple computers, leading to delays and inefficiencies, particularly in determining the appropriate level of security for access requests.
Innovation Solution
A security evaluation computer analyzes access data using authentication rules to determine an appropriate authentication protocol, sending an authorization request to an authorization server, and evaluating the response to decide on completing the access request, thereby optimizing authentication and reducing redundant computations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple computers are involved in routing and processing electronic communications for authentication and authorization checks, then the security verification process can be distributed and coordinated, but delays and frustrations occur due to coordination and communication difficulties between these computers
Solution Approach 1:
The patent segments the authentication and authorization process into distinct functional components distributed across multiple computers. The authentication server handles authentication checks while the authorization server handles authorization checks, allowing parallel processing of these independent tasks. This segmentation enables simultaneous execution of authentication and authorization operations, reducing the sequential processing time that would otherwise delay access requests.
2Adaptability or versatility
If each resource provider individually determines the appropriate authentication level for each access request, then the authentication process can be customized to specific needs, but it becomes difficult and complex for each resource provider to make these determinations
Solution Approach 1:
The patent introduces an intermediary mechanism in the form of standardized protocols and interfaces between the authentication server, authorization server, and resource providers. These intermediaries handle the complexity of determining appropriate authentication levels by providing predefined security policies and evaluation criteria. Resource providers can configure their security needs through standardized interfaces without having to implement complex determination logic themselves, as the intermediary systems handle the analysis and decision-making based on configurable parameters.
3Reliability
If authentication protocols are implemented for every access request, then security is maintained, but computational resources are wasted on unnecessary authentication operations
Solution Approach 1:
The patent implements partial authentication action by allowing authorization checks to proceed independently of complete authentication verification in certain scenarios. The system evaluates access requests and determines that full authentication protocols are not always necessary - authorization servers can perform their checks based on available information without requiring the overhead of complete authentication sequences. This partial action approach maintains adequate security while reducing computational resource consumption on routine access requests.
Data Source
AI summary
A method comprises a security evaluation computer receiving access data from a user device of a user during an access request. The security evaluation computer analyzes the access data using authentication rules that each specify one of a plurality of authentication protocols for authenticating the user or the user device. At least one of the authentication rules specifies a security level flag for when no authentication is to be performed. The security evaluation computer triggers a first authentication rule corresponding to a first authentication protocol of the plurality of authentication protocols and implements the first authentication protocol. The security evaluation computer sends an authorization request message to an authorization server in a manner consistent with the first authentication protocol and then receive an authorization response message. The security evaluation computer analyzes, using authorization rules, the access data and the authorization response message to determine whether to complete the access request.