Service Gateway Layered Authentication Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enterprises that need secure communication over a network but are unable or unwilling to use the SOAP messaging format face challenges in ensuring secure transmission of messages between computing systems.
Innovation Solution
A system comprising a web server, a component, and a service gateway that utilizes digital certificates for authentication across layers, with the service gateway moving the certificate from the transport layer to the application layer for validation and authentication, enabling secure communication using SSL/TLS protocols and the OSI model.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital certificate authentication is implemented at the transport layer, then secure communication is achieved, but the application layer cannot perform additional authentication
Solution Approach 1:
The authentication process is divided into two independent segments: transport layer authentication (handled by the web server using digital certificates) and application layer authentication (handled by the service gateway). This segmentation allows each layer to perform its specific authentication function without interfering with the other, resolving the contradiction between achieving reliable authentication and maintaining system complexity.
Solution Approach 2:
The service gateway acts as an intermediary component that receives the digital certificate from the transport layer and makes it available to the application layer. This intermediary enables the application layer to perform additional authentication using the same certificate without requiring direct access to the transport layer mechanisms, thus improving authentication capability while managing complexity through a clear architectural boundary.
2Reliability
If SOAP messaging format is used for secure communication, then security is provided, but enterprises unable or unwilling to use SOAP cannot communicate securely
Solution Approach 1:
The service gateway is designed with multi-functionality to handle both SOAP and non-SOAP message formats. It universally accepts digital certificates for authentication regardless of the message format, enabling secure communication for enterprises that cannot or will not use SOAP while maintaining security standards. This universality resolves the contradiction between providing secure communication and ensuring protocol compatibility across different enterprise systems.
3Reliability
If digital certificate validation is performed at the application layer, then additional authentication is enabled, but the certificate must be moved from transport layer to application layer
Solution Approach 1:
The service gateway serves as an intermediary that automatically retrieves the digital certificate from the transport layer and makes it available to the application layer authentication mechanism. This intermediary approach enables additional authentication validation at the application layer without requiring complex manual certificate handling, thus improving reliability while managing the complexity of certificate movement through a standardized interface.
Data Source
AI summary
A system for secure communication over a computer network. The system includes a web server, a component, and a service gateway. The web server is operable to receive a message from a customer application via a transport layer and validate a digital certificate associated with the message. The component, which may be a software component, receives the digital certificate from the web server at the transport layer and provides the digital certificate at an application layer. The service gateway receives the digital certificate at the application layer and identifies the customer application associated with the digital certificate. The service gateway promotes validation of the digital certificate and wherein the digital certificate is valid, the service gateway promotes communication of the message from the customer application to a supplier application.