Distributed Access Control Apparatus for Session Load Reduction

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional access control systems face high loads on servers and databases due to centralized session management, leading to reliability issues and the need for extensive infrastructure augmentation to handle increased access and potential failures.

Innovation Solution

A distributed access control method where multiple access control apparatuses are connected bidirectionally, allowing for synchronous updates and references of session information, reducing the load on individual resources and enhancing system reliability by broadcasting update requests and acquiring the latest session information from multiple nodes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If centralized session management is used, then system simplicity is maintained, but server load becomes excessively high and reliability decreases

Engineering Contradiction:
Improvesystem structureVSAvoidsystem reliability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent divides the centralized session management function into multiple distributed access control apparatuses, each maintaining local session information. This segmentation eliminates the single point of failure and reduces individual server load while maintaining overall system reliability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements replication of session information across multiple access control apparatuses. Each apparatus maintains a copy of session data, enabling continued operation even if one apparatus fails. This copying mechanism ensures high availability without requiring complex centralized coordination.

Inventive Principle:
Principle #26Copying

2Reliability

If multiple servers are used for session management, then system reliability improves, but load on individual servers and databases increases

Engineering Contradiction:
Improvesystem reliabilityVSAvoidprocessing load
Core Design Contradiction:
ReliabilityVSPower

Solution Approach 1:

The patent enables each access control apparatus to maintain and process session information locally without requiring all apparatuses to process all requests. This local quality approach allows individual servers to handle only relevant operations, reducing overall processing load while maintaining reliability through local decision-making capabilities.

Inventive Principle:
Principle #3Local quality

3Stability of the object's composition

If centralized database management is used, then data consistency is maintained, but database load becomes excessively high

Engineering Contradiction:
Improvedata consistencyVSAvoiddatabase load
Core Design Contradiction:
Stability of the object's compositionVSPower

Solution Approach 1:

The patent segments the centralized database into distributed storage across multiple access control apparatuses. Each apparatus maintains local session information, reducing the load on any single database system while maintaining data consistency through synchronization mechanisms.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements feedback mechanisms where access control apparatuses notify each other of session information changes. This feedback loop ensures data consistency across the distributed system without requiring constant database queries, reducing database load while maintaining up-to-date information.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS8495223B2Access control method, access control apparatus, and access control program
Publication Date: 2013.07.23 KAMOME ENG
  • US8495223B2 patent drawing
  • US8495223B2 patent drawing
  • US8495223B2 patent drawing

AI summary

An object is to reduce the loads on resources and to flexibly handle increase in access. An access control apparatus 1a includes: session data 21a in which an identifier of a user terminal, session information, and an update time are associated with each other; update means 12 for, upon receipt of an update request, storing updated [0]session information into the session data 21a in association with an update time, and broadcasting, to the other access control apparatuses, an synchronous update request that requests update of the session information of the identifier of the update-target user terminal; and synchronous update means 11 for, upon receipt of the synchronous update request from another access control apparatus, updating the session data 21a on the basis of the synchronous update request in association with the update time.