Authenticator Plugin Interface for Virtualization Portal

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Virtualization management platforms are limited to using a single authentication system and lack flexibility in supporting multiple external authentication protocols, restricting user access management and decoupling from authentication systems.

Innovation Solution

An authenticator plugin interface is introduced to enable virtualization management platforms to perform user authentication across multiple external authentication systems, using key-value pairs for communication and allowing for future extensions without modifying existing code or data, thereby decoupling the platform from authentication system architecture.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a virtualization management platform uses a single authentication system, then the system architecture is simple and easy to implement, but the flexibility and adaptability to support multiple authentication protocols are limited

Engineering Contradiction:

Improveauthentication protocol supportVSAvoidsystem architecture

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The authentication system is segmented into independent plugin modules that can be individually loaded and configured. Each authentication provider (LDAP, Kerberos, SAML, etc.) is implemented as a separate plugin that communicates with the virtualization management platform through a standardized interface, allowing multiple authentication systems to coexist without increasing core platform complexity

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

An authentication plugin interface acts as an intermediary layer between the virtualization management platform and external authentication systems. This mediator handles protocol-specific complexities while presenting a unified interface to the platform, enabling support for multiple authentication protocols without directly coupling the platform to each protocol's implementation details

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If the virtualization management platform is tightly coupled with authentication system architecture, then integration is straightforward, but the platform lacks independence and flexibility for future extensions

Engineering Contradiction:

Improveplatform independenceVSAvoidintegration complexity

Core Design Contradiction:

Adaptability or versatilityVSEase of manufacture

Solution Approach 1:

The authentication plugin interface is designed with universal functionality to support multiple authentication protocols through a common standardized interface. The interface defines universal methods for authentication requests, responses, and error handling that work across different protocol implementations, allowing the platform to remain independent while maintaining ease of integration through consistent interaction patterns

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The authentication system implements dynamic plugin loading and configuration, allowing authentication providers to be added, removed, or modified at runtime without requiring platform code changes. The plugin interface supports dynamic instantiation of authentication providers based on configuration parameters, enabling the platform to adapt to different authentication requirements while maintaining architectural independence

Inventive Principle:

Principle #15Dynamics

3Productivity

If multiple authentication systems are supported through a unified interface, then flexibility and scalability are enhanced, but the device complexity and interface design become more challenging

Engineering Contradiction:

Improveuser access management efficiencyVSAvoidinterface design

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The authentication plugin interface enforces homogeneous interaction patterns across all authentication providers through a standardized method signature and data structure. All providers implement the same interface methods with consistent parameter types and return formats, simplifying the platform's authentication logic while supporting protocol diversity. The interface uses uniform key-value pair structures for authentication data exchange

Inventive Principle:

Principle #33Homogeneity

Data Source

PatentUS11063923B2Authenticator plugin interface

Publication Date: 2021.07.13 RED HAT ISRAEL

AI summary

Authenticator plugin interface for an enterprise virtualization portal is provided. An example method for evaluating a portal access request may comprise: receiving, by a virtualization management platform, a request initiated by a requestor for access to an enterprise virtualization portal associated with the virtualization management platform, the request comprising a login credential; transmitting, to a first authentication system, a first authentication query comprising an identifier of a first data type, and a first value of the first data type, wherein the first value is derived from the login credential; receiving a first response message comprising an identifier of a second data type, and an authentication response of the second data type; and responsive to evaluating the authentication response, granting the requestor access to the enterprise virtualization portal.