Router Authentication for Multi-Service Cloud Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing systems face challenges in allowing multiple users to access different information processing services through a single access router, limiting the ability for users to connect to various services when multiple users are connected to the same access router.
Innovation Solution
An information processing system with a first device executing software, a second device storing information to start the software, and a communication device controlling network communication between the first device and user terminals, which authenticates users and establishes virtual communication paths for each user, enabling multiple users to access different services through a single communication device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If an access router is configured to provide information processing services to users, then the service provider can deliver cloud services through virtual machines and software, but the access router can only register and provide one specific information processing service, limiting users' ability to access multiple different services
Solution Approach 1:
The patent introduces a certification server as an intermediary between the access router and multiple information processing services. The certification server stores certification information for multiple services and provides it to users who connect through a single access router. This mediator enables users to access multiple different services without requiring the access router to be configured for each service individually, thus improving service versatility while maintaining simple router configuration.
2Adaptability or versatility
If multiple users connect to the same access router to use cloud services, then the router can serve multiple users, but each user can only access the single information processing service registered with that router
Solution Approach 1:
The patent implements preliminary action by pre-storing certification information for multiple information processing services in the certification server before users need to access them. When users connect to the access router, they can select from multiple pre-configured services without requiring the access router to be reconfigured for each service. This preliminary preparation enables flexible service selection for multiple users while simplifying the access process, as users only need to provide certification information rather than configure service connections.
3Adaptability or versatility
If the access router registers only one information processing service, then the router configuration remains simple, but users cannot connect to information processing services other than the registered one
Solution Approach 1:
The patent moves the storage of certification information from the access router (one-dimensional limitation) to the certification server (multi-dimensional capacity). By relocating the certification information storage to a separate server with greater storage capacity, the system can support multiple information processing services without increasing the complexity or storage requirements of the access router. This dimensional shift enables users to access multiple services while keeping the router configuration simple.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Provided is a state with which each user is able to use information processing service of each user. A router (2) receives, from a terminal device, authentication information which authenticates a user of a cloud service, and executes a user authentication request upon an authentication server device (3). If the authentication server device (3) successfully authenticates the user, the authentication server device (3) transmits a first information and a second information which are defined for each user of the cloud service, the router (2) receives the first information and the second information. On the basis of the received first information, the router (2) transmits to a data center (DC_1) a first command which instructs a start of software, and, on the basis of the received second information, the router (2) establishes a tunnel to a communication network (Nt).