Intermediary System Temporary ID Generation for Cloud Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face inconvenience in temporarily accessing cloud services without registering on an intermediary system, as existing solutions require cumbersome registration processes.
Innovation Solution
The intermediary system generates temporary identification information and access authorization tokens using protocols like OAuth, allowing users to access cloud services without prior registration, associating these tokens for secure and seamless interactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users register on the intermediary system to access cloud services, then security and authorization are improved, but the registration process becomes cumbersome and time-consuming
Solution Approach 1:
The patent segments the authentication process into two distinct phases: initial registration (performed once) and temporary access (performed multiple times without full registration). The temporary access uses a simplified flow where the intermediary system generates time-limited access tokens without requiring users to complete the full registration process each time, thus reducing time loss while maintaining security through the segmented authentication architecture.
Solution Approach 2:
The intermediary system performs preliminary actions by pre-generating temporary identification information and access tokens before the user actually needs to access the cloud service. These preliminary credentials are issued based on the user's account status without requiring real-time registration, allowing users to access services immediately while the system has already prepared the necessary authorization credentials in advance.
2Productivity
If users access cloud services without registration, then access speed is improved, but security and authorization control deteriorate
Solution Approach 1:
The intermediary system acts as a mediator between the user and the cloud service provider. It issues temporary identification information and access tokens that enable fast access without direct user registration, while simultaneously maintaining security by controlling and limiting the scope of these temporary credentials. The intermediary validates and manages the temporary access rights, ensuring that security is maintained even though users can access services quickly without full registration.
Solution Approach 2:
The patent implements disposable, short-lived access tokens that are generated temporarily for each access session and automatically expire after use or a set time period. These temporary credentials are inexpensive to generate and validate, enabling fast access while maintaining security through their limited lifespan and single-use nature, thus allowing productive access without registration while preventing long-term security risks.
3Ease of operation
If the intermediary system manages temporary IDs and authorization tokens, then ease of operation is improved, but device complexity increases
Solution Approach 1:
The patent extracts the complex token management and authorization logic from the user's interaction flow and concentrates it within the intermediary system. Users only need to provide simple credentials or use pre-configured access methods, while the intermediary system handles the complex generation, validation, and management of temporary identification information and access tokens. This extraction of complexity improves ease of operation for users while the system complexity is contained and managed within the intermediary's infrastructure.
Data Source
AI summary
A non-transitory computer readable medium stores a program causing a computer to execute a process. The process includes receiving a temporary use request from a user; generating temporary identification information in accordance with the temporary use request and providing the generated temporary identification information to the user; acquiring authorization information from a service providing apparatus, the authorization information being information for receiving delegation of a privilege of the user for the service providing apparatus; storing the temporary identification information and the authorization information in association with each other; and when a request including the temporary identification information is received from an apparatus that has transmitted the request, transmitting the authorization information to the service providing apparatus in order to perform an operation according to the request, the authorization information being associated with the temporary identification information.