Service Authorization Routing for Congestion-Aware Application Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing service access methods do not consider the receiving capability of the opposite end, leading to network congestion and occupation of processing resources at application servers due to invalid service accesses.
Innovation Solution
Implement a service access method involving a terminal device, service authorization server, and routing node to perform fine service access control by sending a service authorization request, configuring a service authorization certificate with a time limit, and performing credibility verification before forwarding the request to the application server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If the terminal device sends service access requests directly to the application server without authorization verification, then the service access speed is improved, but network congestion occurs and processing resources of the application server are occupied
Solution Approach 1:
The patent introduces a service authorization server as an intermediary between the terminal device and the application server. The terminal device first obtains service authorization from the service authorization server, which then forwards requests to the application server. This intermediary mechanism prevents direct uncontrolled access to the application server, thereby avoiding network congestion while maintaining access efficiency.
Solution Approach 2:
The patent implements preliminary authorization verification before service access requests are sent to the application server. The terminal device must first obtain a service authorization certificate from the service authorization server, which includes validity time and other control parameters. This preliminary action filters out invalid requests before they reach the application server, preventing resource occupation and network congestion.
2Ease of operation
If the terminal device sends service access requests without considering receiving capability, then the service access simplicity is improved, but processing resources of the application server are occupied by invalid accesses
Solution Approach 1:
The service authorization server acts as a mediator that manages the complexity of authorization verification. The terminal device only needs to interact with the service authorization server to obtain authorization, while the service authorization server handles the complex logic of verifying receiving capability and managing authorization certificates. This separates the simplicity of terminal operation from the complexity of resource management.
Solution Approach 2:
The service authorization server provides feedback to the terminal device about its authorization status and the application server's receiving capability. The authorization certificate contains validity time and other parameters that reflect the current state of the system. This feedback mechanism allows the terminal device to adjust its access behavior accordingly, preventing resource waste while maintaining simple operation.
3Reliability
If fine service access control is implemented through service authorization server, then network congestion is avoided and service performance is maintained, but the system complexity is increased
Solution Approach 1:
The patent segments the service access system into distinct functional modules: the terminal device, the service authorization server, and the application server. Each module has a specific responsibility - the terminal device initiates access, the service authorization server verifies authorization and manages control policies, and the application server provides the actual service. This segmentation allows fine-grained control over service access while keeping each component's complexity manageable.
Solution Approach 2:
The service authorization server serves as an intermediary that absorbs the complexity of authorization management and policy enforcement. By placing this intermediary layer between the terminal device and the application server, the system achieves fine-grained access control without requiring the application server to handle complex authorization logic, thus maintaining service performance while managing system complexity in a distributed manner.
Data Source
AI summary
Provided in the present application are a service access method, a terminal device, a server, and a routing node. The solution comprises: a service authorization server receiving a service authorization request, which is sent by a terminal device, for a target application; on the basis of an access regulation and control policy, which is locally configured for the target application, the service authorization server determining whether to allow the terminal device to perform service access on the target application; after service authorization verification is passed, the service authorization server configuring, for the terminal device, a service authorization certificate and a time limit of the service authorization certificate, such that the terminal device sends, to a routing node, a service access request for the target application; and after the service authorization credibility verification is passed, forwarding the service access request to an application server of the target application.