Identity Cache and Federated Access During Identity System Outages

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The fragmentation, layering, and dispersion of identity management systems within organizations utilizing multiple third-party cloud services create cumbersome administration challenges, making it difficult to consolidate and manage these systems effectively.

Innovation Solution

The implementation of a caching technique for caching identity data and metadata to an identity cache module, along with the use of Discovery Agents, Orchestrating Agents, and Fabric Connectors, facilitates the centralized configuration and management of disparate identity management systems, enabling resilient operations during outages and efficient integration and abstraction of identity data and metadata.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple third-party cloud services are utilized for identity management, then service functionality and versatility are improved, but system complexity and administration difficulty increase

Engineering Contradiction:

Improveservice functionalityVSAvoidsystem complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent combines multiple third-party cloud identity management services into a unified federated identity system. The system integrates identity providers (IdPs) and service providers (SPs) through standardized protocols, allowing centralized management of disparate identity systems while maintaining their individual functionalities. This merging approach resolves the contradiction by consolidating complexity at the integration layer while preserving service versatility.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent introduces federated identity protocols and intermediary components that mediate between multiple third-party cloud services and internal systems. These intermediaries handle authentication, authorization, and identity data exchange, simplifying administration by providing a standardized interface layer that abstracts the complexity of individual service providers while maintaining their unique capabilities.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If identity management systems are dispersed across multiple cloud services, then service specialization and adaptability are improved, but administration ease and consolidation difficulty worsen

Engineering Contradiction:

Improveservice specializationVSAvoidadministration ease

Core Design Contradiction:

Adaptability or versatilityVSEase of operation

Solution Approach 1:

The patent implements a universal federated identity framework that can manage multiple specialized identity management services through a common interface. The system provides multi-functional capabilities including authentication, authorization, identity federation, and lifecycle management across diverse cloud services. This universality allows administrators to manage specialized services through a single standardized platform, resolving the contradiction between service specialization and administration ease.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Productivity

If centralized configuration of disparate identity systems is implemented, then administration efficiency is improved, but system integration complexity increases

Engineering Contradiction:

Improveadministration efficiencyVSAvoidintegration complexity

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The patent segments the identity management architecture into distinct functional components: identity providers, service providers, federated identity protocols, and centralized management interfaces. This segmentation allows each component to be configured and managed independently while maintaining centralized coordination. The modular approach reduces integration complexity by defining clear interfaces and responsibilities for each segment, enabling efficient centralized administration without overwhelming system complexity.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS12598175B2Systems, methods, and storage media for administration of identity management systems within an identity infrastructure

Publication Date: 2026.04.07 STRATA IDENTITY INC

AI summary

Systems, methods, and storage media for controlling access to an application in an identity infrastructure are disclosed. The method comprises requesting to access the application, wherein the application is associated with an identity system, determining a status of the identity system, the status comprising one of an available status and unavailable status. When the status comprises the unavailable status, transmitting a request for additional information, receiving the additional information, and verifying the additional information by referencing an identity cache associated with the identity system. In some cases, the method comprises authenticating a user to access the application when the status comprises the available status and/or the additional information has been verified, and in response to authenticating the user at the application, sending a communication from the application to the user, granting the user access to the application.