Host Agnostic Integration via OAuth 2.0 Token Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems for accessing and managing documents across different software applications and storage systems require local installations, limiting access and editing capabilities, especially in mobile and web-based environments, and often rely on specific authentication schemes that restrict portability and functionality.

Innovation Solution

A host-agnostic integration and interoperation system using an open platform interface that enables secure communication between a host and a service application, allowing document access and editing without local application installation, through user authentication with access tokens and a lightweight proof key system, and employing established communication protocols like HTTP/HTTPS for cross-version compatibility.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If external applications are integrated with web based hosts using traditional authentication schemes, then secure access to documents is achieved, but portability and compatibility across different hosts are restricted

Engineering Contradiction:
Improvesecure accessVSAvoidportability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent implements a universal authentication mechanism using OAuth 2.0 that enables external applications to access multiple different web-based hosts (Microsoft Exchange, IBM Lotus Domino, Novell GroupWise, etc.) through a single standardized interface. The external application server acts as a universal client that can authenticate with any host supporting the protocol, eliminating the need for host-specific integration code and certificates, thereby achieving both security and portability across diverse platforms

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Ease of operation

If local application installations are required for document access and editing, then full functionality is available, but accessibility from mobile and web-based devices is limited

Engineering Contradiction:
ImproveaccessibilityVSAvoidinstallation requirement
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent introduces an external application server as an intermediary between the user's web-based host and the document management functionality. This server hosts the full-featured applications (word processing, spreadsheet, presentation tools) and provides them through web interfaces, allowing users to access complete document creation, editing, and management capabilities from any web-enabled device without installing local software

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If two-way certificate exchange is used to establish trust between host and external applications, then secure communication is established, but system complexity and authentication overhead increase

Engineering Contradiction:
Improvetrust relationshipVSAvoidauthentication scheme
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent fundamentally changes the authentication parameters from complex mutual certificate verification to simplified OAuth 2.0 token-based authentication. Instead of requiring both parties to exchange and verify digital certificates, the system uses access tokens and authorization codes that can be validated through standardized protocols, dramatically reducing computational overhead and implementation complexity while maintaining security

Inventive Principle:
Principle #35Parameter changes

4Reliability

If external applications are designed for specific hosts, then integration depth is maximized, but compatibility with other hosts is lost

Engineering Contradiction:
Improveintegration depthVSAvoidhost compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent creates a universal external application server that can integrate with multiple different host platforms through a standardized OAuth 2.0 interface. The application server maintains deep functional integration capabilities (document editing, collaboration features, real-time synchronization) while being able to connect to any host that supports the authentication protocol, achieving both deep integration and broad compatibility simultaneously

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP2761806B1Host agnostic integration and interoperation system
Publication Date: 2018.07.25 MICROSOFT TECHNOLOGY LICENSING LLC
  • EP2761806B1 patent drawingFigure 1
  • EP2761806B1 patent drawingFigure 2A
  • EP2761806B1 patent drawingFigure 2B

AI summary

A host agnostic integration and interoperation system. The host agnostic integration and interoperation system includes an open platform interface and the associated conventions that define the roles of and direct operations between a host and a service application running on an external application server and allow the host to discover and integrate the functionality provided by the service application. The open platform interface employs a limited number of easily implemented semantic methods allowing a host to expose and integrate the ability to view, edit, or otherwise manipulate a document using the host supported functionality of the service application from a standard user agent. The host agnostic integration and interoperation system handles user authentication at the host using an access token and establishes a trust relationship between the host and the external application server using a lightweight but secure proof key system.