Configurable Security Model Server Architecture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network security systems face challenges in accommodating diverse security requirements across multiple clients connected to a single server, leading to compatibility issues and downtime during updates, as well as the need for simultaneous updates across all external systems in content management systems.
Innovation Solution
Implementing a client/server architecture with a database-driven interface that dynamically identifies and configures security models for each client, allowing for the use of different security parameters such as encryption algorithms and authentication processes, enabling flexible and independent security model management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single security model is implemented on the server to ensure consistency, then security reliability is improved, but all clients must be updated simultaneously causing downtime and reducing system availability
Solution Approach 1:
The patent segments the security model configuration by introducing a client identifier that links each client to a specific security model. This allows the server to maintain multiple security models simultaneously and apply the appropriate model to each client based on their identifier, rather than forcing a single unified security model across all clients.
Solution Approach 2:
The patent applies local quality by allowing different security models to be applied to different clients based on their individual identifiers. Each client receives security processing tailored to their specific security model requirements, enabling localized security customization without affecting other clients or requiring simultaneous updates across the entire system.
2Adaptability or versatility
If different security models are allowed for different clients, then adaptability is improved, but the complexity of managing multiple security models increases
Solution Approach 1:
The patent introduces an intermediary mechanism in the form of a client identifier that serves as a key to retrieve the appropriate security model from storage. This intermediary simplifies management by providing a direct lookup path from client to security model, avoiding the need for complex real-time analysis or manual configuration of security policies for each client.
Solution Approach 2:
The patent creates a universal framework where a single server infrastructure supports multiple security models through a common architecture. The server uses a standardized process of receiving requests, identifying clients, retrieving associated security models, and applying them, making the system universally capable of handling diverse security requirements without requiring separate specialized systems.
3Reliability
If security protocols are updated frequently to address vulnerabilities, then security reliability is improved, but compatibility issues arise between updated servers and outdated clients
Solution Approach 1:
The patent applies dynamics by making security model assignment flexible and changeable over time. Each client's security model can be updated independently by modifying the association between the client identifier and its security model in storage. This allows the system to dynamically adapt to new security requirements without requiring synchronized updates across all clients, as the server can continue to process requests from clients using their current security models while they transition at their own pace.
Data Source
AI summary
A method, apparatus and computer program product provide an application server implementing configurable security models. An example of the method includes receiving a first access request from a first client application, determining a first client identifier for the first client application based at least in part on the first access request, using the first client identifier to identify one or more first security models associated with the first client application from a database, the database comprising a plurality of client identifiers and a plurality of indications of security models associated with each of the plurality of client identifiers, executing an application instance providing functionality in accordance with the one or more first security models, and processing the first access request using the application instance.