Unified Token Authentication and Dynamic Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current internet security infrastructure lacks a mechanism to dynamically change user permissions during a single login session, treating authentication and authorization as separate issues which limits operational flexibility and security.
Innovation Solution
A computing system architecture that includes a token generator, client token agent, database management system, and client authorization management system, where a token is used for both authentication and authorization, allowing dynamic changes to permitted operations during a login session.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If authentication and authorization are treated as separate issues with static authorization, then the system is simpler to implement, but the system cannot dynamically change user permissions during a login session
Solution Approach 1:
The patent merges authentication and authorization into a unified token-based system. The authentication token contains both identity verification information and authorization permissions, allowing the system to handle both functions simultaneously rather than as separate static processes. This enables dynamic authorization changes during login sessions while maintaining system manageability.
Solution Approach 2:
The patent implements dynamic authorization by making the authorization component of the token changeable during a login session. The token structure allows permissions to be updated in real-time based on user actions or system conditions, transforming the traditionally static authorization mechanism into a dynamic one that adapts during the session.
2Reliability
If a token-based system is implemented for simultaneous authentication and authorization, then security is enhanced and dynamic authorization is enabled, but the system complexity increases
Solution Approach 1:
The patent creates a universal token that serves multiple functions: authentication verification, authorization permission storage, and dynamic permission updating. This multi-functional token reduces the need for separate mechanisms for each function, enhancing security while managing system complexity through consolidation rather than proliferation of components.
Solution Approach 2:
The token acts as an intermediary between the user and the system resources. It mediates authentication and authorization by containing both identity verification data and permission information, allowing the system to enforce security policies without complex direct checking mechanisms. This intermediary approach simplifies the overall security architecture while maintaining high security standards.
Data Source
AI summary
A computing system architecture includes a token generator communicable with a client token agent. The client token agent is communicable with a client database access agent. A database management system is communicable with the token agent. The database management system is communicable with the client database access agent. A client authorization management system is communicable with the database management system. The client authorization management system stores a list of authorized operations for a client. The list of authorized operations is configured to be changeable during a client login session.