User Name Mapping in Heterogeneous OS Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In heterogeneous networks comprising different operating systems like WINDOWS® OS and UNIX® OS, user information is not associated, leading to separate accounts and difficulties in cross-domain resource access, necessitating a method to map user identities and authenticate users seamlessly across different name spaces.
Innovation Solution
A method and system for mapping user names and identification numbers between different networks, using a mapping server and remote procedure calls, enabling seamless access to resources by associating user information across networks, including graphical user interface support for configuration and administration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate user accounts are maintained for each OS network in a heterogeneous network, then user information can be stored and managed independently for each network, but user identification and resource access control become complex and cross-domain resource access becomes difficult
Solution Approach 1:
The patent introduces a gateway server as an intermediary component that mediates between users in one OS network and resources in another OS network. The gateway receives authentication requests, maps user names between different name spaces, and coordinates with both networks to enable cross-domain resource access without requiring users to manage separate accounts manually.
Solution Approach 2:
The gateway server performs multiple functions including user name mapping, authentication coordination, and resource access control across different OS networks. This multi-functional approach consolidates what would otherwise require separate mechanisms for each network, simplifying the overall user access control system.
2Adaptability or versatility
If different user identification mechanisms are used in different OS networks, then each network can maintain its native authentication methods, but establishing associations between user information across networks becomes necessary and complex
Solution Approach 1:
The gateway acts as an intermediary that translates between different user identification mechanisms. It receives user names from one network, maps them to corresponding user names in another network's name space, and facilitates authentication without requiring direct integration between the different OS authentication systems.
Solution Approach 2:
The solution segments the authentication process into distinct stages: local authentication by the user's native OS, then gateway-mediated name mapping and cross-network authentication. This segmentation allows each OS to maintain its native authentication methods while the gateway handles the translation and association between different name spaces.
3Reliability
If users have separate accounts for each OS network, then user information can be independently managed, but administrative tasks increase and single sign-on capability is lost
Solution Approach 1:
The gateway automatically performs user name mapping and authentication coordination between networks, eliminating the need for administrators to manually manage separate user accounts across different OS networks. The automatic mapping reduces administrative overhead while maintaining independent account management capabilities.
Solution Approach 2:
The system enables self-service authentication where users can access resources in different OS networks using their native user name without requiring manual account creation or configuration in each network. The gateway automatically handles the mapping and authentication process.
Data Source
AI summary
A user information management service including features and/or methods for user information mapping.