Composite Event Handler for Multi-Tenant Identity Cloud
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identity management systems in cloud environments face challenges in providing secure access across diverse devices and user types, including unauthorized access, account hijacking, and inconsistent security between on-premise and cloud environments, especially when managing access for employees, customers, and partners.
Innovation Solution
A cloud-based multi-tenant identity management system that implements event handling by combining individual events into composite events, publishing them in a composite queue, and dispatching them to a composite handler for parsing and persistence, while supporting microservices architecture for secure access and scalable identity management across hybrid cloud deployments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If individual events are processed separately in a multi-tenant cloud system, then system complexity is reduced and processing is simpler, but security consistency and unified access management across diverse devices and user types deteriorates
Solution Approach 1:
The patent combines multiple individual events into a single composite event that represents a complete user access request. This merging allows the system to maintain simplified event processing architecture while achieving consistent security evaluation across all access attempts, regardless of device or user type. The composite event aggregates relevant information from multiple sources to provide unified security context.
Solution Approach 2:
The composite event handler serves multiple functions: it processes events from various event sources, evaluates security policies across different user types (employees, customers, partners), and manages access control for diverse device categories. This universal handler consolidates security logic that would otherwise be distributed across multiple specialized handlers.
2Reliability
If a unified composite event handler is implemented for all user types and devices, then security consistency and unified access management are improved, but event processing time and system response speed deteriorates
Solution Approach 1:
The system performs preliminary security policy evaluation and risk assessment when composite events are first created, rather than deferring these operations to later processing stages. By preparing security context and evaluating policies upfront during event composition, the actual access decision processing is accelerated, maintaining both consistency and speed.
Solution Approach 2:
The composite event acts as an intermediary structure that pre-aggregates and pre-processes information from multiple event sources before reaching the security evaluation layer. This intermediary composition reduces the processing burden on subsequent security handlers by providing a ready-to-evaluate consolidated event structure.
3Reliability
If multiple individual event queues are maintained for different event types, then event routing precision and delivery reliability are improved, but system complexity and queue management overhead increases
Solution Approach 1:
The patent consolidates multiple individual event queues into a single composite event queue that handles all types of access events uniformly. This unified queue approach maintains reliable event delivery through the same persistence and processing mechanisms while eliminating the complexity of managing multiple separate queues with different routing logic.
Solution Approach 2:
The composite event queue serves as a universal buffer that receives and holds events from various sources and types before they are processed by the appropriate handlers. This single multi-functional queue replaces multiple specialized queues, reducing management overhead while maintaining delivery guarantees through the same reliability mechanisms.
Data Source
AI summary
One embodiment provides event handling in a cloud based multi-tenant identity management system. Embodiments receive a plurality of individual events and a request to create a group from the individual events. Embodiments publish the group as a composite event and persist the composite event in a composite queue. Embodiments then dispatch the composite event to a composite handler, parse the composite event and persist the individual events in respective event queues.