Server Passthrough for Unsupported Protocol Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Server-side components in e-commerce web environments are restricted from executing advanced protocols required for user authentication and attribute exchange, limiting their ability to interact with web browsers and client applications.
Innovation Solution
A method where a primary server sends a request to a secondary server to obtain data using a communication protocol not implemented by the secondary server, allowing the secondary server to process client-generated requests and return responses, thereby enabling interaction with client applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If server-side components are restricted from executing advanced communication protocols, then security is enhanced, but the ability to perform user authentication and attribute exchange is limited
Solution Approach 1:
The patent introduces a primary server as an intermediary that bridges the secondary server and the client. The primary server handles advanced protocol communication (SAML, OAuth, OpenID Connect) with the client application, while the secondary server processes requests using standard protocols. This mediator approach allows the secondary server to benefit from enhanced security restrictions while still accessing advanced authentication capabilities through the primary server's protocol implementation
2Adaptability or versatility
If server-side components implement advanced communication protocols directly, then user authentication and attribute exchange capabilities are enhanced, but security restrictions are violated
Solution Approach 1:
The primary server acts as a compliant intermediary that implements advanced protocols on behalf of the secondary server. The secondary server maintains security compliance by not directly implementing restricted protocols, while still gaining access to advanced authentication capabilities through the primary server's protocol implementation and data exchange mechanisms
3Ease of operation
If client-focus control is used for authentication processing, then user interaction through client applications is enabled, but server-side component control is reduced
Solution Approach 1:
The patent segments the authentication processing into distinct functional areas: the primary server handles client interaction and advanced protocol implementation, while the secondary server handles request processing and business logic. This segmentation allows each server to focus on specific tasks, maintaining user interaction capabilities through the primary server while keeping the secondary server's processing flow relatively simple and controlled
Data Source
AI summary
A method is presented for obtaining information from a client for the benefit of a server using a particular communication protocol that the server does not implement. A primary server receives a client-generated request, and the primary server sends a first request to a secondary server as part of the processing of the client-generated request. While processing the first request, the secondary server determines a need for data obtainable from a client application that supports user interaction using a communication protocol for which the secondary server is not configured to implement. The secondary server sends a second request to the primary server for obtaining data that results from using the communication protocol. The secondary server subsequently receives the resulting data and continues to process the first request using the resulting data, after which the secondary server returns a response for the first request to the primary server.