Discrete Authorization via Segmented Application Servers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Centralized authorization systems face performance issues when verifying tokens for a large quantity of applications, leading to slow authorization processes due to limited processing capabilities.
Innovation Solution
Each application server performs local authorization using a client identifier and authorization credential issued by the user center, eliminating the need for centralized verification, thereby increasing authorization speed through discrete authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If centralized authorization is used, then authorization control is unified and secure, but authorization speed becomes slow due to limited user center processing capability
Solution Approach 1:
The patent divides the centralized authorization function into discrete authorization operations performed by individual application servers. Each application server independently verifies client authorization credentials using its own processing capability, eliminating the bottleneck of centralized verification while maintaining security through distributed architecture.
2Adaptability or versatility
If centralized authorization is used, then user center can manage all authorizations, but processing capability is insufficient for large quantity of applications
Solution Approach 1:
The patent segments the authorization processing load across multiple application servers instead of concentrating it at the user center. Each application server handles authorization for its own applications independently, enabling parallel processing and significantly increasing the system's overall throughput and productivity.
Solution Approach 2:
Application servers perform self-service authorization verification using credentials issued by the user center. Each application server maintains its own authorization state and verification logic, eliminating the need for continuous centralized intervention and enabling autonomous, high-speed authorization decisions.
Data Source
Figure 1~2
Figure 3-1
Figure 3-2
AI summary
This disclosure relates to the field of security technologies, and discloses an authorization method, apparatus, and system, and a storage medium. The method includes: obtaining, by an application, a client identifier of a client that is generated by a user center, where the client identifier is an identifier allocated by the user center after the client logs in to the user center; performing, by the application by using the client identifier, permission verification on an authorization credential when authorization information that includes the authorization credential and that is sent by the client is received, where the authorization credential is sent by the user center to the client, and is used together with the client identifier to prove a permission credential of the client; and allowing, by the application, access of the client when the permission verification on the authorization credential succeeds. In this disclosure, each application locally performs an authorization operation by using permission information in an authorization credential, and an authorization service provided by the user center does not need to perform centralized authorization. Compared with centralized authorization in a related technology, an authorization speed is increased through discrete authorization.