Cloud Authentication Ticket for Third-Party Server Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Cloud computing systems face inconvenience for tenants as they need to authenticate twice, once by the cloud computing system and again by third-party servers, when accessing cloud services via applications hosted on these servers.

Innovation Solution

A method is implemented where the cloud computing system generates a ticket authorizing access to the cloud service, which is transmitted to the third-party server, allowing seamless access without the need for tenants to log in again, by verifying the tenant's identity and permissions, and using this ticket for authentication on the third-party server.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If tenant users access cloud services via applications hosted on third-party servers, then cloud service accessibility is improved, but authentication complexity increases due to requiring login credentials twice

Engineering Contradiction:

Improvecloud service accessibilityVSAvoidauthentication process

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces a ticket as an intermediary authentication mechanism between the cloud computing system and third-party servers. The cloud computing system issues a ticket to the tenant user after initial authentication, and this ticket is then presented to the third-party server for access authorization. This mediator eliminates the need for repeated credential entry while maintaining security across different systems.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent performs preliminary authentication with the cloud computing system before accessing third-party server applications. By validating the tenant user's identity and issuing a ticket in advance, the system prepares authentication credentials that can be reused for subsequent access to various cloud services, eliminating the need for repeated authentication steps.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If the cloud computing system authenticates tenants separately from third-party servers, then security is improved, but user convenience deteriorates due to repeated login requirements

Engineering Contradiction:

Improveauthentication securityVSAvoiduser access convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The ticket serves as a secure intermediary that carries authentication information from the cloud computing system to third-party servers. It maintains security by not requiring transmission of sensitive credentials across multiple systems while enabling seamless access. The ticket includes necessary authentication data to prove tenant identity without exposing passwords or other sensitive information.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent creates a copy of the authentication state in the form of a ticket that can be transmitted between systems. Instead of transmitting actual credentials, the system generates a ticket that replicates the authentication state, allowing the third-party server to verify tenant identity without receiving or storing sensitive authentication information.

Inventive Principle:

Principle #26Copying

3Adaptability or versatility

If the cloud computing system integrates with third-party servers for cloud service delivery, then service versatility is improved, but access process complexity increases due to multiple authentication steps

Engineering Contradiction:

Improveservice delivery capabilityVSAvoidaccess process duration

Core Design Contradiction:

Adaptability or versatilityVSLoss of time

Solution Approach 1:

The system performs the authentication action in advance by validating the tenant user with the cloud computing system before they need to access third-party server applications. By issuing a ticket during this preliminary phase, the system eliminates the need for time-consuming authentication steps during subsequent service access, significantly reducing access process duration.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The ticket acts as a time-saving intermediary that pre-establishes authentication validity between the cloud computing system and third-party servers. Instead of performing authentication checks in real-time during each service access, the system uses the pre-issued ticket to quickly verify tenant identity, reducing the time required for access operations.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11855984B2Method and system of providing secure access to a cloud service in a cloud computing environment

Publication Date: 2023.12.26 SIEMENS AG

AI summary

A system and method are disclosed for providing secure access to a cloud service. In one embodiment, the method includes: receiving a request to access a cloud service hosted on a cloud computing system from a tenant device of a tenant; authenticating the tenant to access the requested cloud service via the application based on a tenant identifier and unique identifier associated with the cloud service; generating a ticket indicating that the tenant is authorized to access the application, wherein the ticket includes a unique identifier associated with the application associated with the requested cloud service; transmitting the ticket to the third-party server communicatively coupled to the cloud computing system; and providing access to the cloud service to the tenant via the application hosted on the third-party server in response to successful validation of the ticket by the third-party server.