IoT Resource Access via Intermediary Authorization Relay

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In the Internet of Things (IoT) scenario, clients cannot access resources when they cannot directly communicate with the authorization server, leading to authorization failures.

Innovation Solution

A resource access method where a client sends an authorization request to an authorization server. If no response is received, the client instructs the resource server to send the authorization request to the authorization server, allowing the resource server to return an access response based on the authorization server's response.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the client directly communicates with the authorization server for authorization, then the authorization process is simple and direct, but the client cannot access resources when disconnected from the authorization server

Engineering Contradiction:
Improveresource access reliabilityVSAvoidauthorization process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The resource server acts as an intermediary between the client and authorization server. When the client cannot directly communicate with the authorization server, the resource server receives the authorization request from the client, forwards it to the authorization server, and relays the response back to the client. This mediator role ensures resource access reliability even when direct client-authorization server communication is unavailable.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If the client sends authorization requests directly to the authorization server, then the authorization flow is efficient, but the system cannot handle scenarios where the authorization server is unreachable

Engineering Contradiction:
Improveauthorization efficiencyVSAvoidnetwork scenario adaptability
Core Design Contradiction:
ProductivityVSAdaptability or versatility

Solution Approach 1:

The system dynamically adapts the authorization request path based on network conditions. When direct communication between client and authorization server is available, the client sends requests directly for efficient processing. When disconnected, the system dynamically switches to using the resource server as an intermediary, ensuring the authorization process can continue in various network scenarios.

Inventive Principle:
Principle #15Dynamics

3Reliability

If the resource server handles authorization requests directly without client-authorization server communication, then resource access is always possible, but the authorization security is compromised

Engineering Contradiction:
Improveresource access availabilityVSAvoidauthorization security risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The resource server serves as a trusted intermediary that maintains authorization security. It receives authorization requests from clients, forwards them to the authorization server for secure verification, and relays the authenticated responses back to clients. This ensures that even when the client cannot directly communicate with the authorization server, the security of the authorization process is maintained through the resource server's mediation.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP3637723B1Resource access method and apparatus
Publication Date: 2025.04.23 HUAWEI CLOUD COMPUTING TECHNOLOGIES CO LTD
  • EP3637723B1 patent drawingFigure 1A~1B
  • EP3637723B1 patent drawingFigure 2~3A
  • EP3637723B1 patent drawingFigure 3B~3C

AI summary

The present invention relates to the field of communication technologies, and particularly, to a resource access method and apparatus. In the solution, even if a client cannot directly communicate with an authorization server, the client can still initiate authorization verification to the authorization server by using a resource server. Then, the resource server returns a resource access response to the client when receiving an authorization response returned by the authorization server. This resolves a current disadvantage that the client cannot access a resource.