Tenant Certificate Validation via Virtual Store Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multi-tenant environments, existing systems face challenges in securely validating custom signatures across distributed networks due to limitations in storage capacity and security, as servers must store and access numerous tenant certificate collections, compromising security and storage efficiency.
Innovation Solution
A method and system where a server on a distributed network accesses and virtually stores tenant certificate collections from private tenant stores, allowing secure validation without storing the entire collection locally, and deletes the virtual store after use to free up space and maintain confidentiality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If servers store tenant certificate collections locally for signature validation, then validation speed is improved, but storage capacity requirements increase and security is compromised
Solution Approach 1:
The patent segments the certificate collection storage by tenant, creating isolated tenant stores for each multi-tenant environment. Each tenant has their own dedicated storage location, allowing efficient access for validation while preventing other tenants from accessing their data. This segmentation resolves the contradiction by enabling fast validation within each tenant's isolated store without requiring global storage capacity.
Solution Approach 2:
The patent introduces a certificate validation server as an intermediary between clients and tenant certificate stores. The server temporarily stores tenant certificate collections in its memory during validation operations, acting as a mediator that provides fast access without requiring permanent local storage on client machines. This intermediary approach enables high-speed validation while maintaining security through centralized control.
2Productivity
If servers store tenant certificate collections locally, then validation efficiency is improved, but security and confidentiality are compromised
Solution Approach 1:
The patent implements segmentation by creating separate, isolated tenant stores for each multi-tenant environment. Each tenant's certificate collection is stored in their own dedicated location, physically isolating their data from other tenants. This segmentation enables efficient validation within each tenant's private store while eliminating the security risk of cross-tenant access.
Solution Approach 2:
The patent uses copying by loading tenant certificate collections into the validation server's memory temporarily during validation operations. Instead of storing copies permanently on the server or clients, the system creates temporary copies that are used only during the validation process and then discarded. This copying approach maintains validation efficiency while minimizing the time sensitive data is exposed.
3Speed
If servers maintain tenant certificate collections continuously, then validation speed is improved, but storage space is wasted and security is reduced
Solution Approach 1:
The patent implements dynamics by making the certificate collection storage temporary and transient. Instead of maintaining continuous storage, the system loads tenant certificate collections into memory only when needed for validation operations and automatically removes them afterward. This dynamic approach provides fast validation speed during operations while eliminating unnecessary storage resource consumption when not in use.
Solution Approach 2:
The patent applies discarding and recovering by temporarily holding tenant certificate collections in the validation server's memory during validation operations, then discarding them afterward. The system recovers storage space by removing these temporary copies once validation is complete. This cycle of loading, using, and discarding maintains validation speed while optimizing storage resource consumption.
Data Source
AI summary
Methods and systems are provided for validating a signature in a multi-tenant environment. A server or other computing device that is part of a distributed network may request a certificate collection from an identified tenant store. The requested certificate collection may be loaded in a virtual store that is accessible by the server or other computing device. The sever or other computing device may then access one or more certificates from the virtual store to validate a signature.