Preset-Server Message Relay for Cloud Access Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing cloud service access systems face security risks due to direct user access to vendor interfaces, lacking centralized audit and control over multiple user accounts with varying permissions, leading to difficulties in managing and securing data access.

Innovation Solution

A pre-deployed server (preset server) intercepts and re-signs cloud service access requests, performing uniform verification and management of user accounts, using fake keys to divert messages through a universal domain suffix, allowing centralized audit and detection of access requests.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple user accounts with different permissions are configured independently to control resource access, then resource permission control is improved, but security risk management deteriorates due to inability to audit and detect access requests

Engineering Contradiction:

Improveresource permission controlVSAvoidsecurity risk management

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a preset server as an intermediary component between terminals and cloud service vendors. This preset server acts as a mediator that receives access requests from terminals, performs signature verification using pre-stored verification keys, and forwards verified requests to cloud service vendors. This intermediary mechanism enables centralized security audit and detection while maintaining independent user account permission control, thus resolving the contradiction between adaptability and reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If users directly access cloud service vendor interfaces to call APIs, then ease of operation is improved, but security control deteriorates due to lack of centralized audit capability

Engineering Contradiction:

ImproveAPI access convenienceVSAvoidsecurity audit system

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The preset server serves as an intermediary that users interact with instead of directly accessing cloud service vendor interfaces. The terminal sends access requests to the preset server, which performs verification and forwarding. This maintains ease of operation for users while introducing centralized security audit capability through the intermediary, avoiding the need for complex distributed security systems at each user endpoint.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary signature verification at the preset server before requests reach cloud service vendors. Verification keys are pre-stored in the preset server, enabling advance authentication and audit of access requests. This preliminary action ensures security control is established before actual resource access occurs, maintaining both operational ease and security management.

Inventive Principle:

Principle #10Preliminary action

3Ease of operation

If interface access keys are made publicly available for users to sign requests, then ease of operation is improved, but security deteriorates due to potential key leakage and unauthorized access

Engineering Contradiction:

Improverequest signing capabilityVSAvoidkey leakage risk

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent segments the key management function by separating verification keys from user access keys. Cloud service vendors provide access keys to users for signing requests, while the preset server stores and uses separate verification keys for validating those signatures. This segmentation allows users to operate with their own keys while the system maintains security through verification keys, reducing the harmful effects of key leakage.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The preset server acts as an intermediary that handles verification key management securely. Instead of users directly managing vendor-provided verification keys (which would be risky if leaked), the preset server mediates the verification process using securely stored keys. This intermediary approach maintains ease of operation for users while protecting against verification key leakage and unauthorized access.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12463964B2Method for transmitting message applied to preset server and terminal, and electronic device

Publication Date: 2025.11.04 BEIJING YOUZHUJU NETWORK TECH CO LTD

AI summary

A method for transmitting a message applied to a preset server, a method for transmitting a message applied to a terminal, and an electronic device are provided. The method for transmitting the message applied to the preset server includes: receiving a cloud service access request message transmitted by a terminal, wherein the cloud service access request message includes domain name address information of the preset server; determining a cloud service interface address to be accessed according to the cloud service access request message; performing signature verification on the cloud service access request message according to the cloud service interface address, and re-signing the cloud service access request message in case that the verification has passed, to obtain a new cloud service access request message; and transmitting the new cloud service access request message to the cloud server according to the cloud service interface address.