Distributed Authorization for Information Handling Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Information Handling Systems (IHSs) face challenges in providing seamless and secure authentication for multiple connected devices, resulting in significant delays and low user acceptance due to the need for individual authentication of each device.
Innovation Solution
The implementation of distributed authorization in IHSs, where a central processor receives authentication materials from a first device and distributes distinct authentication materials to other devices based on a stored policy, allowing devices to access protected resources without the first device's awareness, and revoking these materials as needed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If each connected device is authenticated individually, then security is maintained, but authentication time increases significantly
Solution Approach 1:
The system performs preliminary authentication by having a first device authenticate with the IHS and receive authentication materials in advance. The IHS then proactively distributes authentication materials to second devices based on stored policies before those devices need to access protected resources, eliminating the need for each device to undergo separate authentication processes while maintaining security.
Solution Approach 2:
The IHS acts as an intermediary between devices and protected resources. It receives authentication materials from the first device, processes them according to stored policies, and distributes appropriate authentication materials to second devices. This intermediary role enables centralized security management while reducing authentication time for multiple devices.
2Ease of operation
If authentication materials are distributed to multiple devices, then user convenience improves, but system complexity increases
Solution Approach 1:
The system implements self-service through automated policy-based distribution. Once the IHS receives authentication materials from the first device, it automatically identifies second devices based on stored policies and distributes appropriate authentication materials without requiring manual intervention or complex user configuration. The system serves itself by managing the entire authentication material distribution process autonomously.
Solution Approach 2:
The system manages complexity by changing parameters dynamically based on policies. The IHS stores policies that define under what conditions authentication materials should be distributed to which devices. By changing distribution parameters automatically based on these policies rather than using fixed complex rules, the system achieves user convenience while keeping the authorization logic manageable.
3Extent of automation
If authentication materials are distributed without first device awareness, then automation improves, but control transparency decreases
Solution Approach 1:
The system extracts the awareness requirement from the authentication material distribution process. Instead of requiring the first device to be aware of or participate in the distribution to second devices, the IHS independently performs this function based on stored policies. The first device simply provides authentication materials, and the IHS handles all subsequent distribution autonomously, separating the authentication provision function from the distribution function.
Data Source
AI summary
Systems and methods for distributed authorization are described. In some embodiments, an Information Handling System (IHS) may include a processor; and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: receive a first authentication material from a first device; identify, based upon a policy stored in the IHS, a second device; and distribute a second authentication material to the second device.