Unified Authorization Microservices for Intensive Computing Governance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current high performance computing platforms struggle to manage complex authorizations and interactions between diverse intensive computing solutions, such as HPC, quantum computing, and AI, due to lack of unified governance and secure access, leading to laborious and inefficient use of these resources.
Innovation Solution
A method and system utilizing a proxy microservice, token security microservice, security repository, and computing microservices to manage user authorizations through a unified interface, enabling single sign-on, fine-grained authorization management, and standardization of exchanges across different computing solutions, with token-based control and role management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a unified governance platform is implemented to manage multiple intensive computing solutions, then access efficiency and resource utilization are improved, but system complexity and authorization management difficulty increase
Solution Approach 1:
The system segments authorization management into distinct microservices: a token security microservice for authentication and token generation, and computing microservices for solution-specific authorization. This segmentation allows each component to handle specific tasks independently, improving access efficiency while managing system complexity through modular design.
Solution Approach 2:
The patent introduces an aggregated interface as an intermediary layer between users and multiple intensive computing solutions. This intermediary standardizes access requests and coordinates with backend microservices, enabling efficient unified access without directly exposing the underlying system complexity.
2Reliability
If fine-grained authorization management is implemented across diverse computing solutions, then security is improved, but authorization determination complexity increases
Solution Approach 1:
Authorization management is segmented into two distinct functions: the token security microservice handles user authentication and token generation with role attributes, while computing microservices handle solution-specific authorization determination. This segmentation improves security through dedicated security handling while reducing overall complexity by distributing authorization logic across specialized components.
Solution Approach 2:
Each computing microservice autonomously determines authorizations for its specific solution by retrieving role attributes from tokens and consulting its own authorization repository. This self-service approach enables fine-grained security without requiring a centralized complex authorization system, as each service manages its own authorization logic independently.
3Productivity
If multiple intensive computing solutions are integrated into a single platform, then resource utilization is improved, but interoperability and integration difficulty increase
Solution Approach 1:
The aggregated interface provides a universal access point that handles multiple types of intensive computing solutions (HPC, quantum computing, AI/ML) through a single standardized interface. This multi-functional design improves resource utilization by enabling access to diverse solutions while hiding integration complexity behind a unified access mechanism.
Solution Approach 2:
The aggregated interface acts as an intermediary that standardizes communication between users and diverse computing solutions. It translates various solution-specific protocols and interfaces into a unified access pattern, enabling efficient resource utilization across multiple solutions without requiring direct integration complexity at the user level.
4Speed
If token-based access control is implemented for unified access, then access speed is improved, but security management complexity increases
Solution Approach 1:
Security management is segmented into token generation (handled by the token security microservice) and token validation (handled by computing microservices). This segmentation enables fast access through pre-generated tokens while distributing security management complexity across specialized components, with each microservice focusing on its specific security function.
Data Source
AI summary
The invention relates to a computer system and a method (100) for managing authorizations granted to a user client (2) from an aggregated interface (10) within the framework of unified governance of intensive computing solutions (70); the unified governance being ensured at least partly by an authorization management computer system (1) including: a proxy microservice (20), a token security microservice (30), at least one security repository (35, 36, 37), at least one authorization repository (40) and a computing microservice for each of the intensive computing solutions; said method including the steps of: Receiving (110) access information of a user client (2), Authenticating (120) the user client (2) and determining (130) at least one role attribute for the user client (2), Generating (140) an authentication token and determining (150) authorizations granted to the user client (2), by the at least one computing microservice.