Single Sign-On Computation Closure for Distributed Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In distributed computation environments, authenticating computation closures and entities with varying signature mechanisms and verification methods is challenging, requiring secure and compatible security measures across different architectural levels.

Innovation Solution

A system provides single sign-on for computation closures by generating unique signatures verifiable throughout the distributed environment, ensuring secure authentication and distribution of computations across components and levels, using a single sign-on mechanism that associates signatures with security levels and enforces authentication and validation processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If distributed computation environments use multiple independent authentication mechanisms at different architectural levels, then each component can maintain its own security control, but the complexity of authenticating computation closures and entities increases significantly

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication mechanism complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple independent authentication mechanisms into a unified single sign-on computation closure that operates across all architectural levels. This closure consolidates authentication state and signature verification into a single verifiable structure, eliminating the need for separate authentication mechanisms at different levels while maintaining security across the distributed environment.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The single sign-on computation closure serves multiple functions simultaneously: it provides authentication for computation entities, validates computation closures, establishes trust across different architectural levels, and enables secure distribution of computations. This multi-functional approach replaces multiple specialized authentication mechanisms with one universal solution.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Device complexity

If a single sign-on mechanism is implemented to simplify authentication across distributed environments, then authentication complexity is reduced, but the need to associate signatures with security levels and enforce validation processes increases system requirements

Engineering Contradiction:
Improveauthentication mechanism complexityVSAvoidcompatibility with diverse security measures
Core Design Contradiction:
Device complexityVSAdaptability or versatility

Solution Approach 1:

The single sign-on computation closure incorporates local quality by associating signatures with specific security levels at different architectural layers. Each level can apply its own security requirements while the unified closure structure ensures compatibility. The closure allows local security measures to be enforced without compromising the overall authentication simplicity.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS9536074B2Method and apparatus for providing single sign-on for computation closures
Publication Date: 2017.01.03 NOKIA TECHNOLOGIES OY
  • US9536074B2 patent drawing
  • US9536074B2 patent drawing
  • US9536074B2 patent drawing

AI summary

An approach is provided for providing single sign-on for computation closures. A single sign-on management platform determines to create a single sign-on computation closure in response to an initiation of a single sign-on authentication session. The single sign-on management platform also determines one or more computation entities that are to execute at least one other computation closure under the single sign-on authentication session. The single sign-on management platform further causes, at least in part, a transfer of the single sign-on computation closure to the one or more computation entities.