Microservice Gateway Identity Authentication and Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The complexity of managing microservices in a microservice architecture is increased due to the large number of loose modules, making it difficult to authenticate and provide access to the correct microservices efficiently.
Innovation Solution
A gateway system that receives microservice access requests, authenticates client devices using identity credentials, determines the target microservice, and provides access through a corresponding API, while also managing microservice registrations and creating authentication credentials with public and private keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If microservice architecture divides large-scale systems into fine-grained modules, then system adaptability and maintainability are improved, but device complexity and management difficulty increase
Solution Approach 1:
The patent introduces a gateway system as an intermediary component that manages microservice authentication and routing. The gateway receives access requests, validates identity credentials, determines target microservices, and provides unified access management. This intermediary layer handles the complexity of managing multiple fine-grained microservices, allowing the system to maintain high adaptability while reducing management burden through centralized control.
2Reliability
If identity authentication credentials are created and stored for each client device, then access security is improved, but device complexity and storage requirements increase
Solution Approach 1:
The patent extracts the authentication credential storage and management function from individual microservice modules and centralizes it in the gateway system. The gateway creates and stores identity credentials (public-private key pairs) for client devices, while microservices only need to trust the gateway's authentication decisions. This extraction reduces the complexity burden on individual components while maintaining strong security through centralized credential management.
Data Source
AI summary
A service providing method comprises: receiving a microservice access request, which carries an identity authentication credential, transmitted by a client device; authenticating the client device's identity based on the identity authentication credential; determining a target microservice corresponding to the client device if the authentication of the client device's identity is successful; and providing the client device with the target microservice via a target application programming interface corresponding to the target microservice.