User Store Protocol Translation for Authentication Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The complexity of managing authentication and authorization across diverse user managers and resources in computing systems increases with the need to comprehend multiple communication protocols and manage varying authentication services, leading to system complication and difficulty in access management.
Innovation Solution
A computing system infrastructure with a common application programming interface (API) and user stores that translate commands into specific protocols, along with a principle map to manage access principles, allows for single protocol communication with multiple user managers, simplifying the management of authentication and authorization processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the application is designed to comprehend multiple communication protocols to communicate with different user managers, then the system can support diverse authentication services, but the application becomes more complicated and difficult to program and manage
Solution Approach 1:
The patent introduces user stores as intermediary components between the application and user managers. Each user store is configured with a specific communication protocol and translates application requests into the appropriate protocol for the target user manager. This mediator layer allows the application to interact with multiple user managers using a single, simplified protocol while maintaining support for diverse authentication services.
Solution Approach 2:
The patent segments the system by separating the protocol-specific functionality into individual user stores, each associated with a specific user manager and communication protocol. This segmentation isolates protocol complexity into discrete, manageable units rather than requiring the application to handle all protocols directly, thereby reducing application complexity while maintaining versatility.
2Reliability
If multiple user managers with unique protocols are integrated into the system, then comprehensive authentication coverage is achieved, but access management becomes more difficult
Solution Approach 1:
The patent creates a universal interface layer through user stores that handles multiple functions: protocol translation, authentication request routing, and authorization principle mapping. This universal layer allows the application to manage access to multiple user managers with unique protocols through a single, standardized interface, thereby maintaining comprehensive authentication coverage while simplifying access management operations.
3Measurement precision
If the application must send requests in particular syntaxes required by each user manager, then accurate communication is achieved, but the programming and management difficulty increases
Solution Approach 1:
User stores serve as intermediary translators that receive standardized requests from the application and convert them into the specific syntaxes required by each user manager. This translation layer ensures accurate communication with each user manager while shielding the application from syntax complexity, thereby maintaining communication accuracy without increasing programming complexity.
Data Source
AI summary
According to one aspect of the invention, a computing system capable of communicating with first and second user managers, the first user manager to perform authentication and authorization services for a first resource and the second user manager to perform authentication and authorization services for a second resource, is provided. The computing system comprises a container having an application, a first user store associated with the first user manager, and a second user store associated with the second user manager stored therein, the application to send a first user manager command to the first user store in a first format and a second user manager command to the second user store in the first format, the first user store to translate the first format into a second format and send the second format to the first user manager, the second user store to translate the second format into a third format and send the third format to the second user manager.