Two-Stage Authentication for Scalable PDF Generation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In scalable computing systems, generating PDFs from web pages is processing-intensive and can cause significant network traffic, leading to delays, and existing solutions require users to provide login credentials to third-party systems, compromising data security.

Innovation Solution

A scalable computing system with a core server, intermediate system, and third-party system, where the intermediate system facilitates communication and decouples the core server from the third-party system, using a two-stage authentication process to protect user data and credentials, allowing the third-party system to generate PDFs without direct user interaction or exposure of sensitive information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If users directly interact with third-party systems to generate PDFs, then the system can process documents, but user credentials are exposed and data security is compromised

Engineering Contradiction:
Improvedata securityVSAvoiduser interaction complexity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces an intermediate system that acts as a mediator between the core server system and the third-party PDF generation system. This intermediate system handles authentication and communication, allowing the third-party system to access user data without exposing credentials. The intermediate system receives requests from the core server, obtains session tokens, and forwards them to the third-party system, thereby protecting user data security while enabling document processing.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If the system processes a large number of PDF generation requests, then productivity increases, but network traffic and processing delays increase

Engineering Contradiction:
Improvedocument processing capacityVSAvoidprocessing delay
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The patent segments the PDF generation process into distinct stages: (1) The core server system receives the document processing request, (2) The intermediate system handles authentication and token management, (3) The third-party system generates the PDF, and (4) The processed document is returned to the user. This segmentation allows parallel processing and reduces bottlenecks, enabling the system to handle multiple requests simultaneously without significant delays, thereby increasing productivity while managing network traffic efficiently.

Inventive Principle:
Principle #1Segmentation

3Reliability

If the system implements robust authentication protocols, then data protection improves, but system complexity increases

Engineering Contradiction:
Improveauthentication securityVSAvoidsystem architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The intermediate system consolidates authentication logic and session token management, implementing robust security protocols without requiring the core server system or third-party system to handle complex authentication themselves. The intermediate system manages the two-stage authentication process, obtains session tokens, and handles credential verification, thereby providing strong authentication security while keeping the overall system architecture relatively simple and maintainable.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12155658B2Multi-tenant two-stage authentication
Publication Date: 2024.11.26 SALESFORCE INC
  • US12155658B2 patent drawing
  • US12155658B2 patent drawing
  • US12155658B2 patent drawing

AI summary

Disclosed are some implementations of systems, apparatus, methods and computer program products for implementing a scalable computing system. The scalable computing system includes an intermediate system that facilitates communications between a core server system and a third-party system. The core server system processes a client request for a third-party service in association with a web page having a corresponding web address. The intermediate system communicates with the core server system to obtain a session token, and transmits the session token and web address to the third-party system. The third-party system may then access the web page via the web address using the session token.