Data Store Abstraction Layer for Identity Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Identity Systems face challenges in supporting multiple data stores, particularly in integrating Identity and Access Systems to manage access privileges efficiently across different types of data stores, such as LDAP and SQL databases, for fault tolerance and scalability.
Innovation Solution
The technology separates business logic from data access logic, allowing for the use of various data stores without modification, by creating a proxy that knows which data stores can service a request and facilitating the request through associated agents, enabling communication with multiple data stores to provide unified identity and access management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple data stores are used for fault tolerance and scalability, then system reliability is improved, but device complexity increases due to the need to manage multiple different types of data stores
Solution Approach 1:
The patent introduces a data store abstraction layer that acts as an intermediary between the identity management system and multiple physical data stores. This abstraction layer provides unified access methods and data formats, allowing the system to communicate with different data store types (LDAP, SQL, NoSQL) through a common interface, thereby reducing management complexity while maintaining the reliability benefits of multiple data stores
2Adaptability or versatility
If multiple different types of data stores are integrated, then adaptability is improved, but device complexity increases due to integration requirements
Solution Approach 1:
The patent implements a universal data store interface that can work with multiple data store types through a single unified architecture. The abstraction layer defines standard operations and data formats that can be implemented across different data store technologies, allowing the identity management system to adapt to various data store types without requiring separate integration logic for each type
3Adaptability or versatility
If data access logic is separated from business logic, then adaptability is improved, but device complexity increases due to additional architectural layers
Solution Approach 1:
The patent segments the system into distinct layers: business logic layer and data access layer. The abstraction layer handles all data access operations, while the business logic layer focuses on identity management functions. This segmentation allows data stores to be changed or replaced without affecting business logic, improving adaptability while keeping the added architectural complexity manageable through clear separation of concerns
Data Source
AI summary
Technology is disclosed for supporting multiple data stores. The set of data stores can be of a uniform type, or the various data stores can be different types (e.g. Lightweight Directory Access Protocol (LDAP), Structured Query Language (SQL), etc.). One implementation of the disclosed technology is with an Identity System. Another implementation is with an integrated Identity System and Access System. Various embodiments of the present invention utilize different means to separate the business logic of a system from the data access logic so that different types of data stores can be used without changing the business logic.