Cloud Session Manager for Token Refresh

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current cloud computing environments face challenges with managing multiple cloud provider sessions, particularly with long-running tasks that require user authentication, as existing standards necessitate continuous user interaction to maintain valid access tokens, leading to inefficiencies and potential task failures due to expired tokens.

Innovation Solution

A cloud management system that includes a session manager to establish and refresh cloud provider sessions using credentials, allowing long-running tasks to complete without continuous user authentication by monitoring and managing session tokens, reducing the need for user interaction.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If continuous user interaction is required to maintain valid access tokens, then user authentication security is improved, but task execution reliability deteriorates due to token expiration during long-running tasks

Engineering Contradiction:
Improvetask execution reliabilityVSAvoiduser interaction requirement
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary actions by obtaining and storing refresh tokens before long-running tasks begin. These refresh tokens are kept ready to automatically obtain new access tokens when needed, eliminating the need for user interaction during task execution and ensuring continuous valid authentication.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system introduces an intermediary mechanism (automatic token refresh system) that mediates between the authentication system and long-running tasks. This intermediary automatically manages token validity by detecting expiration and obtaining new tokens, resolving the contradiction between maintaining security and ensuring uninterrupted task execution.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If multiple cloud provider sessions are maintained for multiple users, then user access versatility is improved, but system complexity increases due to managing multiple active sessions

Engineering Contradiction:
Improvemulti-user access capabilityVSAvoidsession management complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system extracts the complexity of session management by separating active cloud provider sessions from user access requests. Instead of maintaining separate sessions for each user, the system uses a single active session with automatic token refresh, while other users wait in a queue, thereby reducing session management complexity while preserving multi-user access capability.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The session management system provides self-service by automatically detecting token expiration and obtaining new tokens without user intervention. This automated self-service approach reduces the complexity of managing multiple sessions while maintaining versatility of access for multiple users.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11558470B2Methods and apparatus to manage cloud provider sessions
Publication Date: 2023.01.17 VMWARE INC
  • US11558470B2 patent drawing
  • US11558470B2 patent drawing
  • US11558470B2 patent drawing

AI summary

Methods, apparatus, systems and articles of manufacture are disclosed to manage cloud provider sessions. An example apparatus includes at least one computer readable medium; and processor circuitry to execute instructions that cause the processor circuitry to: in response to detecting a first request to establish a first session with a cloud provider that is to perform a first action: establish the first session using credentials associated with the cloud provider; record a lifespan of a session token associated with the first session; and transmit the session token to a cloud provider adapter to facilitate communication between the cloud provider adapter and the cloud provider; and in response to detecting a second request to establish a second session with the cloud provider that is to perform a second action, transmit the session token to the cloud provider adapter to facilitate communication between the cloud provider adapter and the cloud provider.