Token Based Security Protocol for Web Service Access Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Traditional web service security measures lack the ability to track and limit client access to individual methods, only allowing authorization for the entire service or denying access entirely.

Innovation Solution

Implementing a security token validation and client authentication process that allows for granular control of access by using a security token with a defined structure, enabling clients to access specific functions of a web service while tracking usage and notifying clients of changes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If traditional security measures are used to authorize client access to the entire service, then service authorization is simplified, but granular control over individual methods is lost

Engineering Contradiction:

Improveservice authorizationVSAvoidgranular control over individual methods

Core Design Contradiction:

Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent segments the service authorization into individual method-level controls by introducing a token that contains specific method identifiers. Each token grants access to particular methods rather than the entire service, enabling granular control while maintaining simplified authorization through token-based validation.

Inventive Principle:

Principle #1Segmentation

2Reliability

If traditional security measures are used to deny client authorization entirely, then security is simplified, but the ability to track and limit individual method access is lost

Engineering Contradiction:

ImprovesecurityVSAvoidtracking and limiting individual method access

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The patent implements feedback by requiring clients to present tokens that contain method identifier information. The service validates these tokens and can track which methods are accessed by which clients, providing both security validation and access tracking without denying authorization entirely.

Inventive Principle:

Principle #23Feedback

3Measurement precision

If granular control over individual methods is implemented, then access control precision is improved, but system complexity increases

Engineering Contradiction:

Improveaccess control precisionVSAvoidsystem complexity

Core Design Contradiction:

Measurement precisionVSDevice complexity

Solution Approach 1:

The patent introduces a token as an intermediary that encapsulates all the granular access control information. Instead of implementing complex validation logic for each method, the system validates the intermediary token which contains pre-defined method identifiers, simplifying the overall system while maintaining precise access control.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS8973118B2Token based security protocol for managing access to web services

Publication Date: 2015.03.03 CELLCO PARTNERSHIP INC

AI summary

Token based techniques for managing client access to individual methods or resources provided by an application or service can be implemented at the application server hosting the application or service. Such techniques include performing client authentication and authorization based on information associated with the client as specified in a security token generated for the client. The security token associated with the client enables a service provider to monitor and control client access to the methods of the service on an individual basis.