Parallel Authentication Chains via Login Manager

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional pluggable authentication module (PAM) systems lack flexibility in supporting diverse authentication requirements as they rely on a serial stack of modules that run in a specific order, limiting their ability to adapt to different systems' needs.

Innovation Solution

A system and method that allow multiple chains of authentication modules to be executed in parallel, with a modular approach enabling dynamic configuration of module stacks and order, and the ability to add new chains, managed by a login manager that determines dependencies and invokes chain managers based on user login requests.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a serial stack of authentication modules is used, then the authentication process follows a specific order, but the flexibility to support different authentication requirements is insufficient

Engineering Contradiction:

Improveflexibility to support different authentication requirementsVSAvoidcomplexity of authentication module structure

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The authentication system is divided into multiple independent chains, each chain consisting of a sequence of authentication modules. These chains can be executed in parallel, allowing different authentication requirements to be met through different chains. The login manager segments the overall authentication process into manageable, independently configurable chains that can be selectively invoked.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system dynamically configures and invokes different chains of authentication modules based on the specific authentication requirements. Rather than a fixed serial stack, the login manager can select and execute appropriate chains dynamically, allowing the authentication process to adapt to different scenarios without requiring recompilation or structural changes to the core system.

Inventive Principle:

Principle #15Dynamics

2Adaptability or versatility

If multiple chains of authentication modules are executed in parallel, then flexibility and adaptability are enhanced, but the complexity of managing and invoking chains increases

Engineering Contradiction:

Improveability to support various authentication requirementsVSAvoidcomplexity of chain management and invocation

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The login manager acts as an intermediary between the authentication requirements and the multiple chains of authentication modules. It receives authentication requests, determines which chains are appropriate based on the requirements, and invokes the relevant chain managers. This intermediary layer simplifies the complexity by providing a unified interface while managing the underlying parallel chain execution.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The login manager is designed with multi-functionality to handle various authentication scenarios. It can identify multiple chains, determine dependencies between them, invoke chain managers in the correct order, and respond to authentication requests based on execution results. This universal component manages the complexity of parallel chains without requiring separate management mechanisms for each chain.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Ease of operation

If a serial stack of authentication modules is used, then the structure is simple, but the ability to adapt to different systems' needs is limited

Engineering Contradiction:

Improvesimplicity of authentication module structureVSAvoidability to adapt to different authentication requirements

Core Design Contradiction:

Ease of operationVSAdaptability or versatility

Solution Approach 1:

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system transitions from a single-dimensional serial stack to a multi-dimensional structure with multiple parallel chains. This dimensional change allows the system to handle diverse authentication requirements by selecting and executing appropriate chains, while maintaining the simplicity of individual chain structures. The login manager orchestrates this multi-dimensional execution without requiring complex changes to the underlying module structures.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS9325500B2Providing support for multiple authentication chains

Publication Date: 2016.04.26 RED HAT INC

AI summary

A method and system to support multiple chains of authentication modules. The method may include receiving a user login request, and identifying multiple chains of authentication modules to be performed prior to allowing a user to login, where each chain of authentication modules is associated with a chain manager. The method further includes determining dependencies between chain managers, invoking the chain managers in the order defined by the dependencies, andresponding to the user login request based on execution results of the authentication modules.