Backend Server Intermediary for Web Authentication Registration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The overhead associated with registering each new web server with an authentication server becomes unacceptable when an enterprise expands, requiring a more efficient method for adding new server systems.

Innovation Solution

Implementing a backend server registered with the authentication server, which redirects unauthorized access requests and communicates authentication results, allowing new server systems to operate without individual registration with the authentication server.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If each web server is registered with the authentication server, then authentication security is maintained, but system complexity and overhead increase significantly when enterprise expands

Engineering Contradiction:
Improveauthentication securityVSAvoidregistration overhead
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a backend server as an intermediary component between web servers and the authentication server. The backend server is registered once with the authentication server and maintains authentication credentials. When web servers need to authenticate users, they communicate through the backend server rather than directly registering with the authentication server. This intermediary approach maintains security while eliminating the need for each web server to individually register with the authentication server.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If each web server is registered with the authentication server, then proper authentication control is ensured, but scalability is reduced when adding new server systems

Engineering Contradiction:
Improveauthentication controlVSAvoidscalability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The backend server is designed as a universal authentication service that can serve multiple web servers simultaneously. Instead of each web server having its own authentication registration, the backend server provides universal authentication services to all web servers in the system. This multi-functional approach allows the system to scale easily - new web servers can be added without additional registration overhead, as they all utilize the same backend server infrastructure.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Ease of operation

If registration is required for each web server, then authentication server can manage each server individually, but time and resources are consumed for each registration process

Engineering Contradiction:
Improveindividual server managementVSAvoidregistration time
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The authentication credentials and server information are pre-configured in the backend server during its initial registration. This preliminary action eliminates the need for repeated registration processes when adding new web servers. The backend server already contains the necessary authentication information and can immediately begin serving authentication requests without requiring time-consuming registration procedures for each new web server.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8433896B2Simplifying addition of web servers when authentication server requires registration
Publication Date: 2013.04.30 ORACLE INT CORP
  • US8433896B2 patent drawing
  • US8433896B2 patent drawing
  • US8433896B2 patent drawing

AI summary

An aspect of the present invention simplifies addition of new server systems which serve web pages to client systems, when an authentication server requires registration before providing authentication services. In an embodiment, a backend server is provided, which is registered with an authentication server. The server systems are implemented to redirect unauthorized access requests to the backend server, and the configurations performed during registration of the backend server system are used for authenticating a user and receiving an authentication result. The backend server communicates the authentication result and other information received from the authentication server to the server system. According to another aspect, such simplification is performed in a single sign-on (SSO) environment.