Remote Session Pooling for Authentication Overhead Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mechanisms for establishing authenticated sessions with secure remote servers are inefficient, leading to increased overhead and processing burdens on both the client and server devices due to the need for separate authentication requests for each resource access.
Innovation Solution
A method and apparatus that maintain a pool of remote session references, which are generated and managed to facilitate the borrowing and reuse of authenticated sessions, reducing the need for repeated authentication by using cloned or replicated session references to access secure devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a separate authentication request is sent to the web application prior to sending a request for the secured resource, then the user can be authenticated before accessing resources, but the process becomes time consuming and increases processing capacity requirements
Solution Approach 1:
The patent implements preliminary action by pre-establishing authenticated sessions with the remote server before actual resource requests are made. The system maintains a pool of pre-authenticated session references that can be quickly borrowed and reused, eliminating the need to perform authentication sequentially before each resource access. This pre-action approach significantly reduces the time required for session establishment while maintaining authentication reliability.
2Reliability
If user credentials are received with each request for a secured resource, then authentication can be performed before resource access, but the remote server must support receiving credentials with every request which imposes an undue burden
Solution Approach 1:
The patent applies copying by creating a pool of session references that replicate the authentication state without requiring the remote server to handle credentials with every request. Each session reference in the pool is a copy that contains the necessary authentication information, allowing the system to reuse authenticated sessions without modifying the remote server's credential handling requirements. This approach maintains authentication reliability while avoiding the undue burden on the remote server.
3Reliability
If a separate authentication request is sent prior to resource requests, then authentication can be performed, but processing capacity and load capacity on the remote server are inefficiently used
Solution Approach 1:
The patent merges multiple authentication operations into a single pre-established authenticated session. Instead of performing separate authentication requests before each resource access, the system combines authentication with the initial session establishment and maintains that authenticated state for subsequent resource requests. This merging approach significantly improves processing capacity efficiency by reducing the total number of authentication operations required while maintaining authentication reliability.
Data Source
AI summary
An apparatus is provided for generating a pool of remote session references that may be utilized to establish authenticated sessions. The apparatus includes a processor configured to generate remote session references that may be maintained in a pool. The remote session references may include information used to establish authenticated sessions with a secure device. The processor is also configured to determine whether a remote session reference(s) of the pool may be borrowed in response to receipt of a request for a resource(s) on the secure device. Additionally, the processor may perform a test on a borrowed remote session reference when a determination reveals that one of the remote session references may be borrowed. The processor may also provide the secure device with the borrowed remote session reference and a request for the resource(s) in response to determining that the test passed. Corresponding computer program products and methods are also provided.