Proxy Authentication System for Identity Provider Load Balancing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In service-oriented computing environments, users face inconvenience due to the need for multiple authentication credentials across various services, leading to authentication congestion and delays at Identity Providers when a large number of Service Providers rely on them for authentication.
Innovation Solution
A proxy system that receives and processes security tokens from authentication providers, determining their relevance to incoming authentication requests and providing them as responses, thereby balancing the load and enabling authentication on behalf of the authentication provider.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a large number of Service Providers rely on a single Identity Provider for authentication, then users can access multiple services through a single authentication (Single Sign-On), but authentication congestion and delays occur at the Identity Provider
Solution Approach 1:
The patent introduces a proxy entity that acts as an intermediary between Service Providers and the Identity Provider. The proxy receives authentication requests from Service Providers, obtains security tokens from the Identity Provider, and then responds to authentication requests by providing the appropriate security tokens. This mediator approach allows the system to maintain Single Sign-On functionality while distributing the authentication load, preventing congestion at the Identity Provider and reducing authentication delays.
2Reliability
If the Identity Provider handles all authentication requests directly, then authentication security is maintained, but the system becomes vulnerable to overload and performance degradation
Solution Approach 1:
The patent segments the authentication system into multiple components: the Identity Provider that issues security tokens, proxies that manage and distribute these tokens, and Service Providers that verify them. This segmentation allows the Identity Provider to focus on secure token issuance while proxies handle the bulk of authentication requests, thereby maintaining security through centralized token management while improving overall system productivity through distributed request handling.
3Reliability
If users provide authentication credentials for each service separately, then each service can authenticate users independently, but users face inconvenience of managing multiple credentials
Solution Approach 1:
The patent implements a universal authentication mechanism where a single security token issued by the Identity Provider can be used across multiple Service Providers. The proxy manages this universal token and provides it to various Service Providers as needed. This allows Service Providers to maintain independent authentication capabilities while users only need to authenticate once with the Identity Provider, significantly improving ease of operation without compromising service-specific authentication reliability.
Data Source
AI summary
A method, a proxy, a device, a system, and a computer program product for enabling authentication is provided. Authentication is enabled by receiving by a proxy a security token from an authentication provider, the security token including authentication information, receiving by the proxy an authentication request directed to the authentication provider or to the proxy, determining by the proxy whether the authentication information corresponds to the authentication request, and in case the authentication information corresponds to the authentication request, providing by the proxy the security token as a response to the authentication request.