US 2022/0028160 A1 · NON-BLOCKING TOKEN AUTHENTICATION CACHE

Abstract

Techniques are disclosed relating to a non-blocking token authentication cache. In various embodiments, a server computer system receives a request for service from a client device, with the request including an authentication token issued by an authentication service. The server computer system accesses a cache of previously received validation responses from the authentication service to determine whether one of the validation responses indicates that the authentication token has already been validated by the authentication service. In response to determining that the cache includes a validation response indicating that the authentication token has already been validated by the authentication service, the server computer system first provides a response to the request for service to the client device, and then contacts the authentication service to determine whether the authentication token is still valid.

Claims20

Dependent claims

A method, comprising:

receiving, by a server computer system from a client device, a request for service, wherein the request includes an authentication token issued by an authentication service;
accessing, at the server computer system, a cache of previously received validation responses from the authentication service to determine whether one of the validation responses indicates that the authentication token has already been validated by the authentication service;
and
in response to determining that the cache includes a validation response indicating that the authentication token has already been validated by the authentication service, the server computer system:
providing, to the client device, a response to the request for service, wherein the response is provided based on the validation response and not on token validity information about the authentication token that is stored by the authentication service;
and
contacting the authentication service to determine whether the authentication token is still valid and should be revalidated.

4 more elements

A non-transitory computer-readable medium having program instructions stored thereon that are capable of causing a server computer system to perform operations comprising:

receiving a request for service that includes an authentication token;
determining whether a validation response for the authentication token is stored in a cache of validation responses;
and
in response to determining that the validation response for the authentication token is stored in the cache with an unexpired time-to-live (TTL) value:
processing the request for service without having to contact the authentication service;
sending a request to an authentication service to determine if the authentication token is still valid and should be revalidated;
and
in response to determining, from the authentication service, that the token is valid, extending the TTL value in the cache;
and
in response to determining, from the authentication service, that the token is not valid, removing the validation response from the cache.

7 more elements

A system, comprising:

an authentication computer system configured to provide validation responses for authentication tokens, wherein at least some of the authentication tokens have an associated expiration value indicating a first length of time during which these authentication tokens are valid;
a requesting computer system configured to:
cache validation responses from the authentication computer system, wherein a particular validation response includes a time-to-live (TTL) value for a particular authentication token, the TTL value is originally set to a second length of time during which the particular authentication token may be used to approve requests for service even if the particular authentication token has been revoked by the authentication computer system;
receive a request for service that includes the particular authentication token;
and
in response to the particular validation response indicating that the particular authentication token has already been validated by the authentication computer system:
provide a response to the request for service without having to contact the authentication computer system;
and
contact the authentication computer system to determine whether the particular authentication token is still valid and should be revalidated.

6 more elements

Dependencies are inferred from the claim text.

Non-blocking token authentication cache

Life of this patent

Non-blocking token authentication cache

Life of this patent

Abstract

Claims20