Data Storage Access Token Caching for Network Delay Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enterprise environments face challenges in effectively managing user identities and access to resources across multiple systems, leading to complexity and cost in locally stored storage systems, which cloud-based storage services aim to address but require improved authentication and authorization mechanisms.
Innovation Solution
A data storage system integrated with an Identity Management (IDM) system that uses access tokens and roles to authenticate and authorize users, caching access tokens and roles to reduce reliance on IDM systems and enhance network performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If cloud-based storage services are used to replace locally stored storage systems, then cost and complexity for end users are reduced, but network delays and reliance on external IDM systems increase
Solution Approach 1:
The system performs preliminary authentication by obtaining access tokens from the IDM system before actual data access operations. These tokens are cached locally in the data storage system, so subsequent authorization decisions can be made without real-time network communication with the IDM system, eliminating delays during data operations.
Solution Approach 2:
Access tokens serve as intermediaries between the IDM system and the data storage system. The tokens encapsulate authorization information and can be validated locally, reducing the need for continuous communication with the external IDM system while maintaining security and access control.
2Productivity
If access tokens are cached locally in the data storage system, then network delays are reduced and performance is improved, but system complexity increases
Solution Approach 1:
The system extracts only the essential authorization information into compact access tokens that can be cached and validated locally. This extraction allows the data storage system to make authorization decisions independently without maintaining complex authentication logic, simplifying the overall system while improving performance.
Solution Approach 2:
Instead of replicating the entire IDM system functionality, the data storage system creates and caches simplified copies of authorization information in the form of access tokens. These tokens contain sufficient information for local validation decisions, reducing system complexity while enabling fast local authorization.
3Reliability
If multiple systems are used to manage user identities and access, then comprehensive access control is achieved, but management complexity and costs increase
Solution Approach 1:
The system merges the authentication and authorization functions into a unified access token mechanism. The IDM system handles authentication and issues tokens, while the data storage system uses these tokens for authorization decisions, creating a streamlined integrated approach that maintains comprehensive access control while reducing operational complexity.
Data Source
AI summary
A method and system for managing access to information stored in a data storage system of an organization is provided. In an embodiment, the data storage system may be configured to receive a request from a requester on a client device to access information stored in the data storage system. In some aspects, upon receiving the request, the first system may determine that an access token identifying the requester is stored in a cache in the data storage system. In some aspects, the data storage system may then retrieve one or more roles from the cache. In some examples, the roles may be associated with the access token. In certain embodiments, the data storage system may then be configured to determine that the requester is authorized to access the information based on the roles and provide the information to the requester on the client device.