Trusted Token Onboarding for Automated Voucher Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In highly distributed computing environments, onboarding data processing systems is inefficient and time-consuming due to the need for user interaction to provide access credentials, leading to delays and disruptions in computer-implemented services.
Innovation Solution
A trusted token system is introduced, where a voucher management service generates a trusted token after verifying user credentials, which is then delegated to an orchestrator to automate the onboarding process without user intervention, facilitating efficient and uninterrupted service provision.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user interaction is required to provide access credentials for onboarding, then security and authorization are ensured, but onboarding efficiency and service availability deteriorate
Solution Approach 1:
The system performs preliminary actions by pre-generating trusted tokens and storing them securely before onboarding is needed. When a data processing system requires onboarding, the trusted token is already available, eliminating the need for real-time user credential verification and enabling immediate automated onboarding while maintaining security.
Solution Approach 2:
The patent introduces an intermediary component (trusted token) that mediates between user authorization and system onboarding. The trusted token serves as a credential intermediary that carries authorization information without requiring direct user interaction during the onboarding process, thus maintaining security while improving efficiency.
2Measurement precision
If user credentials are verified in real-time during onboarding, then authorization accuracy is maintained, but onboarding time and service disruption increase
Solution Approach 1:
Authorization verification is performed in advance when the trusted token is generated and issued to the user. The token contains pre-validated authorization information, allowing the onboarding process to proceed without real-time credential verification, thus maintaining authorization accuracy while eliminating time delays.
Solution Approach 2:
The system creates a copy of user credentials in the form of a trusted token that contains all necessary authorization information. This token copy can be used during onboarding without requiring access to the original credentials or real-time verification, thus maintaining authorization accuracy while reducing onboarding time.
3Productivity
If automated onboarding is implemented without user interaction, then service availability improves, but security verification may be compromised
Solution Approach 1:
Security verification is performed in advance when the trusted token is generated by the authorization server. The token incorporates security credentials and authorization information that were verified before issuance. During automated onboarding, this pre-verified token is used, maintaining security verification while enabling service availability without user interaction.
Solution Approach 2:
The trusted token acts as a security intermediary that carries verified authorization information from the authorization server to the data processing system. It enables automated onboarding while maintaining security by serving as a trusted credential that was previously verified, thus resolving the contradiction between automation and security verification.
Data Source
AI summary
Methods and systems for managing onboarding of data processing systems are disclosed. Data processing systems added to a distributed environment may require onboarding. To onboard the data processing systems, vouchers are required that delegate authority to an entity to onboard the data processing systems. An orchestrator may be an entity responsible for onboarding the data processing systems when they become available. To onboard the data processing systems without intervention by a user, the orchestrator may provide a trusted token to a voucher management service and may obtain the voucher in response. The trusted token may be previously generated through an interaction between the user with authority over the data processing systems and the voucher management service. The trusted token may be provided by the user to the orchestrator to indicate that the orchestrator is trusted by the user to onboard data processing systems associated with the user.