Authentication Token Encoding for Distributed Storage Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Distributed storage environments face inefficiencies in user authentication processes, requiring substantial processing power and time, especially when serving content across multiple servers, which frustrates users and increases processing demands.

Innovation Solution

The implementation of an authentication process that encodes frequently accessed content paths into an authentication token, allowing for faster verification without accessing the repository, thereby reducing processing power and increasing authentication speed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional user authentication processes are used for every content request, then security and access control are maintained, but processing resources are substantially consumed and authentication speed decreases

Engineering Contradiction:
Improveaccess control securityVSAvoidauthentication speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system performs authentication in advance and stores the authenticated state in cookies on the user's device. When the user requests frequently accessed content, the server checks these pre-stored cookies to verify authentication status without performing a complete authentication process, thereby maintaining security while significantly speeding up access to frequently requested resources.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements differentiated authentication handling based on content type: frequently accessed content uses streamlined cookie-based verification for speed, while other content maintains standard authentication processes. This local optimization allows the system to improve performance where it matters most (frequent accesses) without compromising overall security.

Inventive Principle:
Principle #3Local quality

2Reliability

If repository access is performed for every authentication check, then accurate access control is ensured, but processing power and time are substantially increased

Engineering Contradiction:
Improveaccess control accuracyVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system extracts the authentication verification step from the complete authentication process. Instead of accessing the repository for every content request, the system extracts and utilizes pre-stored authentication cookies that contain verified user identity information. This extraction eliminates redundant repository accesses while maintaining access control accuracy through the use of securely stored authentication credentials.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If standard authentication processes are used across multiple servers, then each server's security requirements are met, but processing resources compound and efficiency decreases

Engineering Contradiction:
Improvemulti-server security complianceVSAvoidprocessing resource consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system implements a universal authentication approach where a single authentication cookie generated by one server is recognized and accepted by multiple servers in the distributed environment. This multi-functional cookie system allows the same authentication credential to serve multiple servers simultaneously, eliminating the need for separate authentication processes at each server and thereby reducing compounded processing resource consumption while maintaining security compliance across the distributed system.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS10178098B2Controlling user access to content
Publication Date: 2019.01.08 ADOBE INC
  • US10178098B2 patent drawing
  • US10178098B2 patent drawing
  • US10178098B2 patent drawing

AI summary

Methods and systems for controlling access to content include an authentication process that provides for increased speed by reducing, or eliminating in some cases, steps in the authentication process. In particular, the systems and methods can encode content paths previously authenticated for a particular user into an authentication token. When the user attempts to access one of the top content paths, the systems and methods can verify the user based on the encoded authentication token rather than following a complete authentication process.