Custom IAM Token Generation Without Proxy Service Latency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity and access management (IAM) systems limit customization of IAM tokens, leading to increased complexity and cost for organizations due to the need for proxy services to ensure security and compatibility, resulting in latency issues.
Innovation Solution
An IAM service generates customized IAM tokens by receiving and executing instructions from organizations to modify token parameters, reducing the need for proxy services and enhancing security through direct token generation within the IAM system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the IAM system provides large quantities of customization options for IAM tokens, then the adaptability of the token generation system is improved, but the device complexity increases due to the need for proxy services to modify tokens
Solution Approach 1:
The patent extracts the token modification functionality from external proxy services and integrates it directly into the IAM system's token generation process. The IAM system now executes organization-specific instructions to modify token parameters during the original token generation step, eliminating the need for separate proxy services and reducing overall system complexity while maintaining full customization capability
Solution Approach 2:
The patent merges the token generation and token modification operations into a single integrated process within the IAM system. By combining these previously separate functions, the system reduces the number of components involved, simplifies the architecture, and eliminates the complexity associated with managing separate proxy services while preserving the ability to customize token parameters
2Reliability
If proxy services are implemented to modify IAM tokens, then the adaptability to ensure security and compatibility is improved, but the loss of time increases due to latency in requesting and transmitting tokens
Solution Approach 1:
The patent implements preliminary action by having the IAM system execute organization-specific instructions to modify token parameters during the initial token generation process, before the tokens need to be transmitted to proxy services. This advance modification eliminates subsequent time-consuming token transformation steps and reduces overall latency while ensuring security and compatibility requirements are met
3Adaptability or versatility
If proxy services are used to modify IAM tokens, then the adaptability to ensure backwards compatibility is improved, but the device complexity increases due to additional service layers
Solution Approach 1:
The patent extracts the backwards compatibility modification functionality from external proxy services and integrates it directly into the IAM system's token generation process. The IAM system now executes organization-specific instructions to modify token parameters during the original token generation step, eliminating the need for separate proxy services and reducing overall system complexity while maintaining full customization capability
Solution Approach 2:
The patent makes the IAM system universal by enabling it to perform both standard token generation and organization-specific token modification functions within a single system. This multi-functionality eliminates the need for specialized proxy services, reduces the number of service layers, and simplifies the architecture while maintaining adaptability for different organization requirements including backwards compatibility
Data Source
AI summary
To generate custom identity and access management (IAM) tokens, an IAM service may receive a set of instructions from an organization to modify a set of parameters of a respective IAM token to enable customized access to one or more services associated with the organization. Further, the IAM service may receive a request for an IAM token from an application associated with the organization based on the IAM service receiving the set of instructions. In response to the request, the IAM service may generate the IAM token for the application and may execute the set of instructions received from the organization to generate a modified IAM token from the initial IAM token. The IAM service may then transmit the modified IAM token to the application based on executing the set of instructions to generate and obtain the modified IAM token.