Multi-tenant Function Module Dispatcher via Logical Access Parameters

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In a secured network environment, software function modules stored across multiple systems require access parameters like user names, passwords, and host names to execute on tenant systems, but sharing these parameters poses security concerns, making centralized execution challenging.

Innovation Solution

A multi-tenant enabled function module is generated by adding a logical tenant access parameter, which allows access data to be stored and retrieved from a destination map, enabling secure execution across multiple tenant systems without exposing individual access parameters.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If access parameters are shared across multiple tenant systems to enable function module execution, then execution capability is improved, but security is worsened

Engineering Contradiction:

Improvefunction module execution capabilityVSAvoidsecurity risk from exposed access parameters

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a central tenant system as an intermediary between client systems and multiple tenant systems. This intermediary manages access parameters centrally, allowing function modules to be executed across multiple tenant systems without exposing sensitive access credentials. The central tenant system acts as a secure mediator that handles authentication and authorization, enabling cross-tenant execution while maintaining security boundaries.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent extracts sensitive access parameters from individual tenant systems and consolidates them into a centralized destination map within the central tenant system. By taking out the access parameters from distributed locations and storing them centrally with controlled access, the system enables function module execution across multiple tenants without requiring clients to have direct access to individual tenant credentials.

Inventive Principle:

Principle #2Taking out (Extraction)

2Object-affected harmful factors

If access parameters are stored centrally to improve security, then security is improved, but system complexity increases

Engineering Contradiction:

Improvesecurity protection of access parametersVSAvoidcentralized system architecture complexity

Core Design Contradiction:

Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The central tenant system performs multiple functions: it stores access parameters securely, manages destination mappings, routes function module execution requests, and handles authentication. By consolidating these diverse functions into a single universal system, the patent avoids the complexity of implementing separate mechanisms for each function across multiple distributed systems.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent changes the organizational parameter of access parameters from distributed storage across multiple tenant systems to centralized storage in a destination map. This parameter change simplifies the overall system architecture by creating a single source of truth for access credentials, reducing the complexity of managing multiple separate authentication systems while improving security through centralized control.

Inventive Principle:

Principle #35Parameter changes

3Object-affected harmful factors

If multiple tenant systems maintain their own access parameters for security, then security is improved, but ease of operation deteriorates

Engineering Contradiction:

Improveaccess parameter securityVSAvoidclient system operation simplicity

Core Design Contradiction:

Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The central tenant system serves as an intermediary that abstracts away the complexity of multiple access parameters from client systems. Clients interact with a single centralized interface rather than managing multiple tenant-specific credentials. This intermediary handles the complexity of retrieving and managing access parameters for different tenants, making the system easier to operate while maintaining security through centralized parameter management.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS8832180B2Function module dispatcher

Publication Date: 2014.09.09 SAP SE

AI summary

Disclosed are methods and systems for function module dispatcher. The methods and systems involve generating a multi tenant enabled function module by adding a logical tenant access parameter to a function to be executed in a tenant system. The methods and systems further include receiving access data associated with a central tenant system and input parameters for executing the function module on one or more tenant systems, accessing a central tenant system based on the access data, retrieving tenant access data associated with the tenant system by matching a logical tenant access parameter data received in the input parameters to the multi tenant function call with the tenant access parameter data stored in a destination map and dispatching the call to execute the function module on a respective tenant based on the tenant access data retrieved from the destination map.