SSO Session Quota Enforcement Logic

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In single sign-on (SSO) configured networks, the lack of session quota enforcement leads to session table saturation, which can hinder user access due to unlimited active sessions, potentially indicating misuse or forgotten logouts, necessitating a method to limit simultaneous sessions with minimal administrative overhead.

Innovation Solution

Implementing session quota enforcement rules within the SSO provider, using a configurable framework to determine and enforce session quotas, allowing administrators to tailor quotas based on user attributes and prioritize session management, with options for internal session tables or shared repositories.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If unlimited active sessions are allowed in an SSO network, then user access flexibility is improved, but session table saturation occurs preventing other users from logging in

Engineering Contradiction:

Improveuser access flexibilityVSAvoiduser access availability

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent applies parameter changes by introducing session quota limits that dynamically constrain the number of active sessions per user. The system monitors session counts and enforces quotas by preventing new session creation or terminating existing sessions when limits are reached, thus maintaining system reliability while allowing flexible user access within defined boundaries.

Inventive Principle:

Principle #35Parameter changes

2Reliability

If session quota enforcement is implemented, then session table saturation is prevented, but system complexity increases

Engineering Contradiction:

Improvesession table capacity managementVSAvoidsession management system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements self-service by enabling the session quota enforcement logic to automatically monitor session counts, compare against quotas, and enforce limits without requiring manual administrative intervention. The system autonomously manages session creation and termination based on predefined quotas, reducing operational complexity while maintaining reliable session table capacity management.

Inventive Principle:

Principle #25Self-service

3Reliability

If rigid session quota limits are enforced, then session table saturation is prevented, but user convenience deteriorates

Engineering Contradiction:

Improvesession table capacity managementVSAvoiduser session management convenience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent applies dynamics by implementing flexible session quota enforcement that can adapt to different user roles, time periods, and session types. The system allows administrators to configure differentiated quotas for various user categories and enables dynamic session management that considers session age, activity level, and priority, thereby maintaining reliability while preserving user convenience through nuanced policy enforcement.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS7908380B1Method of session quota constraint enforcement

Publication Date: 2011.03.15 ORACLE AMERICAN INC

AI summary

A method to limit active sessions connecting user access to a computer network is presented. First, a request to initiate a new user session in the computer network is authenticated. The authentication is operatively conducted within a single sign-on provider. A session quota is then determined through a session quota logic of the single sign-on provider with the session quota logic retrieving a stored session quota. Then the number of active sessions is compared with the determined session quota. The determined session quota is enforced though a session quota enforcement logic of the SSO provider.