Edge Device Token Cache for Authentication Delay Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Authentication and authorization operations in edge devices for accessing data items often result in significant communication-related delays due to the need to communicate with remotely located cloud data centers.
Innovation Solution
A system that processes user requests at edge devices by using token identifiers to authenticate users and authorize access to data items locally, without requiring communication with a central data center, by utilizing a token cache and content cache for quick lookups and decorations of requests.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication and authorization operations are performed through communications with a central data center, then security and authorization control are improved, but communication delays increase significantly
Solution Approach 1:
The patent segments the authentication system by distributing token payload caches from central data centers to multiple edge devices throughout the network. This allows authentication operations to be performed locally at edge devices rather than requiring continuous communication with the central data center, thereby reducing communication delays while maintaining security through distributed token validation.
Solution Approach 2:
The patent implements preliminary action by pre-fetching and caching token payloads at edge devices before they are needed for authentication. Token payloads are retrieved from the central data center in advance and stored in local caches, so when authentication requests arrive at edge devices, the validation can proceed immediately without waiting for real-time communication with the central data center.
2Productivity
If token payloads are cached at edge devices for fast authentication, then authentication speed is improved, but memory usage at edge devices increases
Solution Approach 1:
The patent applies parameter changes by implementing a hierarchical cache structure with different token payload sizes and expiration times. The system dynamically adjusts cache retention parameters based on usage patterns, caching frequently accessed token payloads for longer durations while evicting less frequently used ones, thereby optimizing the balance between authentication speed and memory consumption at edge devices.
Data Source
AI summary
The disclosed embodiments relate to a system that processes requests to access data item at an edge device in a network. During operation, the system receives the request to access the data item from a user, wherein the request is received at the edge device, and wherein the edge device communicates with an origin server, which stores data items. If the request includes a token identifier, the system uses the token identifier to look up a token payload in a token cache at the edge device. The system then decorates the request with fields from the token payload, and analyzes the decorated request to determine whether the user is authorized to access the data item. If the user is authorized to access the data item, the system looks up the data item in a content cache at the edge device, and returns the data item to the user to complete the request.