Server-Side Authentication Using Identification Features

Solution Overview

Problem

Conventional authentication schemes, such as SASL, are inconvenient for users as they require complex installation of the libsasl library on client terminals, making it difficult for users to access services like memcached protocol, especially in multi-user or cloud-based environments.

Innovation Solution

An authentication method and system that allows client terminals to authenticate with a server using an identification feature, such as an IP address or MAC address, without relying on the SASL mechanism, by generating a login request, determining if the server's database includes the identification feature and account information, and initiating data communications upon successful authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If SASL authentication mechanism is used, then authentication security is improved, but device complexity and ease of operation deteriorate due to requiring libsasl library installation

Engineering Contradiction:

Improveauthentication securityVSAvoidease of authentication

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent extracts the authentication logic from the client terminal and relocates it to the server. Instead of requiring the client to install and configure SASL libraries, the server performs authentication by receiving identification features from the client and querying a database, thereby eliminating complex client-side installation requirements while maintaining security.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces an intermediary database as a mediator between the client terminal and the authentication server. The database stores identification features and account information, allowing the server to authenticate clients without requiring them to install authentication libraries. This intermediary approach simplifies the client-side while maintaining secure authentication.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If SASL authentication mechanism is used, then authentication security is improved, but device complexity worsens due to requiring libsasl library installation

Engineering Contradiction:

Improveauthentication securityVSAvoidclient terminal complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the authentication logic from the client terminal and relocates it to the server. Instead of requiring the client to install and configure SASL libraries, the server performs authentication by receiving identification features from the client and querying a database, thereby eliminating complex client-side installation requirements while maintaining security.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The server performs self-service authentication by automatically querying its database using identification features provided by the client. This eliminates the need for clients to install authentication libraries, as the server handles all authentication operations independently using its own database resources.

Inventive Principle:

Principle #25Self-service

3Adaptability or versatility

If conventional authentication schemes are used, then authentication functionality is provided, but ease of operation deteriorates due to manual library installation requirements

Engineering Contradiction:

Improveauthentication functionalityVSAvoiduser operation simplicity

Core Design Contradiction:

Adaptability or versatilityVSEase of operation

Solution Approach 1:

The server performs self-service authentication by automatically querying its database using identification features provided by the client. This eliminates the need for clients to install authentication libraries, as the server handles all authentication operations independently using its own database resources.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent introduces an intermediary database as a mediator between the client terminal and the authentication server. The database stores identification features and account information, allowing the server to authenticate clients without requiring them to install authentication libraries. This intermediary approach simplifies the client-side while maintaining secure authentication.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS10516666B2Authentication method, apparatus, and system

Publication Date: 2019.12.24 CLOUD INTELLIGENCE ASSETS HOLDING (SINGAPORE) PTE LTD

AI summary

An authentication method is provided. The authentication method includes receiving a login request from a client terminal. The login request may be generated based on an identification feature of the client terminal, and the login request may include account information associated with the client terminal. The method may further include identifying the identification feature based on the login request, determining whether a database associated with a server includes the identification feature and the account information, generating login status information based on a result of the determination and sending the login status information to the client terminal, and if the login status information indicates a login success of the client terminal, initiating data communications with the client terminal.