Password Management Server Reserve Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed access control systems, failures in communication links can prevent password updates from being shared among multiple elements, leading to inconsistent password management and loss of access to devices.
Innovation Solution
Implementing an active and reserve password system across multiple password management servers, where the active password is updated and shared with reserve passwords, allowing servers to access devices using reserve passwords if communication failures occur, and updating passwords consistently across servers when communication is restored.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a distributed access control system is implemented across multiple geographically distributed servers, then system availability and access continuity are improved, but password synchronization consistency deteriorates due to communication link failures
Solution Approach 1:
The system performs preliminary actions by proactively detecting communication link failures before they cause password synchronization issues. The password management server monitors communication links and initiates failure detection procedures in advance, allowing the system to prepare alternative access mechanisms before actual password access failures occur.
Solution Approach 2:
The system implements feedback mechanisms where the password management server continuously monitors communication link status and receives feedback about link failures. This feedback drives automatic responses including detecting failed links, attempting alternative access methods, and notifying relevant parties about the communication status and access implications.
2Stability of the object's composition
If active password updates are transmitted across communication links between servers, then password management consistency is improved, but system vulnerability to communication failures worsens
Solution Approach 1:
The system applies beforehand cushioning by preparing and storing alternative passwords in advance before communication failures occur. When a communication link fails, these pre-prepared alternative passwords provide a cushion that allows continued system operation without requiring immediate communication with other servers for password retrieval.
Solution Approach 2:
The system changes parameters by transitioning between different password states (active password, alternative password, failed password) based on communication link status. When communication succeeds, the active password is used; when communication fails, the system parameters change to utilize alternative passwords, and this state can be updated when communication is restored.
3Adaptability or versatility
If multiple password management servers are deployed in different locations, then system accessibility and fault tolerance are improved, but password update synchronization complexity increases
Solution Approach 1:
The system applies segmentation by dividing password management into independent modular components deployed across multiple geographically distributed servers. Each server instance can independently detect communication failures and manage its own password state, reducing the complexity of centralized synchronization while maintaining overall system consistency through standardized failure detection and recovery procedures.
Data Source
AI summary
Disclosed herein is a system and a method of providing access to at least one password protected device (D1-D5) via a password management system (100). The password management system (100) comprises first and second password management servers (200), each comprising a memory for storing an active password and a reserve password. The first and second password management servers (200) communicate the active and reserve passwords via a communication link (220). Either one of the first and second password management servers (200) requests access to the password protected device using the active password stored in the memory, and if the active password does not provide access, requests access using the reserve password.


