Protocol-Level Identity Mapping for Distributed Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for mapping end user accounts to service accounts in distributed computing systems are static and application-specific, lacking flexibility and scalability, and do not provide adequate security features.
Innovation Solution
Implementing a protocol-level identity mapping system that intercepts client requests, authenticates user credentials, and translates them into service credentials, providing dynamic and transparent mapping without altering the distributed computing system or application configurations, and enabling multiple authentication methods.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If static mapping at system level or application level is used, then the mapping is built into the distributed computing system or application program, but the system lacks flexibility and scalability
Solution Approach 1:
The patent introduces a protocol-level intermediary layer that sits between the application layer and the distributed computing system. This intermediary handles identity mapping and protocol translation, allowing dynamic mapping without modifying the underlying system or applications. The intermediary acts as a mediator that translates end user accounts to service accounts dynamically, providing flexibility while keeping the core system unchanged.
Solution Approach 2:
The patent moves the identity mapping from the traditional system level or application level to a new protocol level dimension. This protocol-level mapping operates at the network protocol layer, enabling dynamic account mapping without requiring changes to the distributed computing system configuration or application program code. This dimensional shift provides both flexibility and simplicity.
2Adaptability or versatility
If mapping is built into the distributed computing system or application program, then the mapping is fixed, but it cannot provide dynamic and transparent mapping across multiple applications
Solution Approach 1:
The patent creates a universal protocol-level mapping mechanism that can serve multiple applications simultaneously. The same protocol translation layer handles identity mapping for different applications and services, providing a multi-functional solution. This universal approach enables dynamic mapping across diverse applications without requiring separate mapping configurations for each application.
Solution Approach 2:
The protocol-level intermediary provides transparent mapping by intercepting requests before they reach the distributed computing system, performing identity translation, and forwarding the translated requests. This intermediary approach makes the mapping transparent to both the applications and the underlying system, achieving dynamic mapping without configuration complexity.
3Reliability
If conventional static mapping is used, then the system configuration is simple, but it lacks adequate security features and customizable authentication
Solution Approach 1:
The patent implements dynamic authentication at the protocol level, where authentication methods and credentials can be adjusted without changing the underlying system configuration. The protocol translation layer dynamically selects and applies appropriate authentication mechanisms based on the service and user, providing enhanced security while maintaining manageable complexity through centralized control.
Solution Approach 2:
The patent changes the parameter of authentication from fixed system-level credentials to flexible protocol-level credentials that can be dynamically adjusted. By modifying the authentication parameters at the protocol translation layer, the system achieves enhanced security features and customizable authentication without fundamentally changing the system architecture, managing complexity through parameter flexibility.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems, computer program products and methods implementing protocol -level mapping are described. An identity mapping system intercepts a request from a client device to a distributed computing system. The identity mapping system determines a first protocol of the request. The identity mapping system determines user credentials associated with the request. The identity mapping system authenticates the request based on the user credentials. The identity mapping system determines a service provided by the distributed computing system that the request accesses. The identity mapping system determines service credentials of that service. The identity mapping system translates the first protocol into a second protocol associated with the distributed computing system, including associating the service credentials with the request. The identity mapping system then submits the request to the distributed computing system.