Enterprise Gateway Proxy for Resource Access Automation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Managing multiple service requestors and providers across different networks is time-consuming and inefficient, particularly when service providers are in private networks and requestors are in public networks, due to manual authorization processes that delay task performance and affect operational efficiency.
Innovation Solution
A dynamic proxy server and gateway system that dynamically builds authorization profiles and decouples API communication, allowing for simultaneous discovery and authorization of resources, reducing the need for manual configuration and speeding up access by transmitting code directly between the client, proxy server, and resource.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual authorization processes are used for each service requestor accessing service providers, then authorization control is maintained, but access time and operational efficiency deteriorate
Solution Approach 1:
The system performs preliminary actions by pre-establishing authorization profiles for service requestors before they need to access service providers. The gateway server stores these profiles and automatically retrieves them during access requests, eliminating the need for real-time manual authorization checks and reducing access time while maintaining security control.
Solution Approach 2:
The gateway server acts as an intermediary between service requestors and service providers. It mediates the authorization process by automatically matching service requestors with their pre-configured authorization profiles and making authorization decisions without requiring manual intervention, thus resolving the contradiction between maintaining control and reducing access time.
2Measurement precision
If manual configuration is performed for each service requestor accessing multiple service providers, then authorization accuracy is improved, but management complexity and time consumption increase
Solution Approach 1:
The system merges multiple authorization configurations into a single unified gateway server that manages all service requestors and service providers. Instead of manually configuring each requestor-provider pair separately, the gateway consolidates authorization logic and profiles in one central location, reducing management complexity while maintaining authorization accuracy through systematic profile matching.
Solution Approach 2:
The gateway server provides universal authorization services for all service requestors accessing any service provider within the system. It implements a multi-functional authorization mechanism that handles different types of requests, profiles, and service providers through a single unified interface, eliminating the need for separate manual configurations for each scenario.
3Reliability
If authorization checks are performed for each service provider access, then security control is maintained, but operational efficiency deteriorates
Solution Approach 1:
The system performs preliminary authorization setup by creating and storing authorization profiles that define which service requestors can access which service providers. These profiles are established in advance through automated processes rather than manual real-time checks, maintaining security control while enabling rapid access decisions that improve operational efficiency.
Solution Approach 2:
The gateway server implements self-service authorization by automatically retrieving and applying authorization profiles without requiring manual intervention for each access request. The system autonomously matches service requestors with their profiles and makes authorization decisions, maintaining security control while eliminating the time delays associated with manual authorization processes.
Data Source
AI summary
A method for increasing a speed of access to resources in an enterprise system. A gateway receives a request from the client to find a resource executed by a computer within the enterprise system. The gateway determines whether the client is authorized to find the resource. Responsive to authorization, the gateway instructs the proxy server to access an application programming interface (API) that controls communication between the resource and the proxy server, and instructs the API to query the resource to determine whether code used by the client to work with the resource should be transmitted to the client. The code is transmitted to the proxy server and from the proxy server to the gateway and from the gateway to the client via the network, wherein the speed of access to the resource is increased by avoiding communication with other resources in the enterprise system.