Distributed Token Verification Across Service Servers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing service providing systems face scalability issues due to single point of failure (SPOF) and excessive load on authentication servers during token verification, making them unsuitable for large-scale applications.
Innovation Solution
A token verification method that utilizes local storage and multiple service servers for distributed verification processes, including local cache and database searches, and fallbacks to authentication servers when necessary, to ensure robustness and reduce load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If centralized token storage is used to verify tokens, then the verification process is simplified, but the system becomes vulnerable to single point of failure and scalability issues
Solution Approach 1:
The patent divides the centralized token storage into multiple distributed service servers, each maintaining local token verification capabilities. This segmentation eliminates the single point of failure by distributing the verification function across multiple independent nodes, allowing the system to remain operational even when individual servers fail.
Solution Approach 2:
The patent introduces an authentication server as an intermediary that issues tokens and provides verification support to service servers. This intermediary enables service servers to verify tokens locally without relying on a single centralized storage, thereby improving both reliability and scalability while maintaining verification simplicity.
2Reliability
If authentication server is used for token verification, then token security is ensured, but the authentication server experiences excessive load
Solution Approach 1:
The patent extracts the token verification function from the authentication server and implements it locally in service servers. This extraction reduces the load on the authentication server to primarily token issuance and validation, while service servers handle the repetitive verification operations independently, thereby improving overall system productivity.
Solution Approach 2:
Service servers are equipped with local token verification capabilities, allowing them to independently verify tokens without constantly querying the authentication server. This self-service approach significantly reduces the authentication server's load while maintaining security through locally cached verification data.
3Ease of manufacture
If centralized token storage is used, then implementation is simple, but the system lacks scalability for large-scale applications
Solution Approach 1:
The patent segments the centralized storage architecture into multiple distributed service servers, each capable of independent token verification. This segmentation enables the system to scale horizontally by adding more service servers as needed, while maintaining implementation simplicity through standardized local verification logic.
Solution Approach 2:
Each service server is designed with universal token verification capabilities, allowing any service server to handle verification requests independently. This multi-functionality enables flexible system scaling and deployment across different environments without requiring complex centralized coordination.
Data Source
AI summary
Provided is a method for a token verification performed by a service server. The method according to some embodiments of the present disclosure comprises receiving a service request message comprising a token from a client, performing a first verification process for the token through local storage of the service server in response to the service request message and performing a second verification process for the token through another service server related to a used service list in response to failure of the first verification process, wherein the service request message further comprises the used service list of the client.