Token Cache System for Multi-Service Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for client access to protected web resources are unsustainable due to the lack of standardization in security measures across different web services, requiring clients to manage multiple access tokens and handle token invalidation and expiration.
Innovation Solution
A token cache system that stores access tokens, credentials information, and metadata, allowing clients to obtain refreshed tokens and adapt to changes, by sending initialization messages, caching credentials and metadata, and associating access tokens with cache keys for secure and efficient access to protected resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If conventional methods are used for client access to protected web resources, then each web service can implement its own security measures, but the client complexity increases and sustainability decreases due to managing multiple access tokens and handling token invalidation and expiration
Solution Approach 1:
The patent introduces a token cache as an intermediary component that mediates between the client application and multiple web services. The token cache stores access tokens, credentials information, and token metadata, automatically managing token retrieval, refreshment, and validation. This intermediary layer shields the client from the complexity of directly managing multiple access tokens across different web services, while still enabling versatile access to services with diverse security requirements
2Reliability
If conventional methods are used for client access to protected web resources, then each web service can implement its own security measures, but the system becomes unsustainable due to frequent authentication requirements and token management overhead
Solution Approach 1:
The patent implements preliminary action by pre-storing access tokens, credentials information, and token metadata in the token cache before they are needed. The system proactively manages token refreshment based on expiration information stored in the cache, so that valid tokens are readily available when access is required. This eliminates the need for frequent real-time authentication requests, maintaining security reliability while significantly improving access efficiency and sustainability
3Ease of operation
If access tokens are cached with metadata and credentials information, then token refreshment and adaptation to changes become easier, but the storage requirements and cache management complexity increase
Solution Approach 1:
The patent merges multiple related data elements into a unified token cache structure. Instead of separately managing access tokens, credentials information, and token metadata in different locations, the system combines them into a single integrated cache. This unified approach stores tokens alongside their associated metadata (including expiration information and refresh tokens) and credentials information, simplifying cache management operations while enabling easy retrieval and refreshment of complete token sets with a single cache operation
Data Source
AI summary
A system includes one or more processors to request access tokens from a token service computer, cache the access tokens and related information in a token cache, transmit the access tokens with a resource request to a resource server, and receive requested resources in response to the resource request. The resource server transmits representations of requested resources to computing devices having valid tokens. The access tokens and related information including credentials information and token metadata are stored in the token cache.