Computer readable storage media for tiered connection pooling and methods and systems for utilizing same

• US 10,382,443 B2
• Filed: 03/20/2018
• Issued: 08/13/2019
• Est. Priority Date: 07/18/2014
• Status: Active Grant

• Current Assignee: Document Storage Systems, Inc.
• Original Assignee: Document Storage Systems, Inc.
• Inventors: Katieb, Ralph
• Primary Examiner(s): Brown, Anthony D
• Assistant Examiner(s): Ambaye, Samuel
• Application Number:
  US15/926,958
• Publication Number:
  US 20180212969A1
• Time in Patent Office: 511 Days
• Field of Search: 726 4
• CPC Class Codes: G06F 16/00 Information retrieval; Database structures therefor; File system structures therefor
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/062 Pre-authentication

Abstract

Systems and methods for tiered connection pooling are disclosed herein, which may be used in a method of fulfilling user requests in an enterprise computing system. The method involving generating, by a processing unit, a first connection pool comprising one or more previously used authenticated connections with a resource; generating, by the processing unit, a second connection pool comprising one or more unused authenticated connections with the resource; and generating, by the processing unit, a third connection pool comprising one or more unauthenticated connections with the resource; receiving, by the processing unit, a request from the user device to access the resource, the resource requiring authentication for access; and fulfilling, by the processing unit, the request based on a connection from the first, second, or third connection pool.

Claims

1. A computer hardware system comprising at least one processing unit coupled to a memory, wherein the memory is encoded with computer executable instructions that when executed cause the at least one processing unit to:

receive a request from a user device to access a resource, the resource requiring authentication for access;

determine whether a previously used authenticated connection is available, wherein the previously used connection is a connection that has previously been used to fulfill a request provided by the user device enabling data associated with the previously fulfilled request to be buffered and more readily available to fulfill a subsequent request;

if the previously used authenticated connection is available, fulfill the request using the previously used authenticated connection;

if at least the previously used authenticated connection is not available, determine whether an unauthenticated connection is available;

if the unauthenticated connection is available, authenticate the unauthenticated connection to provide an unused authenticated connection and fulfill the request using the unused authenticated connection;

if the unauthenticated connection is not available, establish a first unauthenticated connection with the resource;

authenticate the first unauthenticated connection to provide a first authenticated connection; and

fulfill the request using the first unused authenticated connection.

2. The system of claim 1, wherein the instructions further cause the at least one processing unit to authenticate the first unauthenticated connection to provide a first authenticated connection includes instructions that when executed cause the at least one processing unit to:

remove the first unauthenticated connection from a connection pool associated with the resource.

3. The system of claim 1, wherein the instructions further cause the at least one processing unit to authenticate the first unauthenticated connection to provide a first authenticated connection includes instructions that when executed cause the at least one processing unit to:

add the first authenticated connection to a connection pool associated with the resource that includes the at least one previously used authenticated connection.

4. The system of claim 1, wherein the instructions further cause the at least one processing unit to:

if the previously used authenticated connection is not available, determine whether an unused authenticated connection is available; and

if the unused authenticated connection is available, fulfill the request using the unused authenticated connection.

5. The system of claim 1, wherein the instructions further cause the at least one processing unit to:

authenticate a user associated with the user device.

6. A method of fulfilling user requests in an enterprise computing system, the method comprising:

generating, by a processing unit, a first connection pool comprising one or more previously used authenticated connections with a resource, wherein the one or more previously used authenticated connections are connections that have previously been used to fulfill a previous request provided by a user device enabling data associated with the previously fulfilled request to be buffered and more readily available to fulfill a subsequent request;

receiving, by the processing unit, a request from the user device to access the resource, the resource requiring authentication for access;

fulfilling, by the processing unit, the request based on the one or more previously used authenticated connections from the first connection pool if at least one of the one or more previously used authenticate connections is available; and

if at least the one or more previously used authenticated connections are not available, by the processing unit, determine whether an unauthenticated connection is available;

if the unauthenticated connection is available, authenticating the unauthenticated connection to provide an unused authenticated connection and fulfilling the request using the unused authenticated connection;

if the unused unauthenticated connection is not available, generating a first unauthenticated connection with the resource;

authenticating the first unauthenticated connection to provide a first unused authenticated connection; and

fulfilling the request using the first unused authenticated connection.

7. The method of claim 6, further comprising generating, by the processing unit, a second connection pool comprising one or more unused authenticated connections with the resource.

8. The method of claim 7 further comprising, if the one or more previously used authenticated connections are not available, by the processing unit, fulfilling the request using at least one of the one or more unused authenticated connections.

9. The method of claim 6, further comprising generating, by a processing unit, a third connection pool comprising one or more second unauthenticated connections with the resource.

10. The method of claim 6, further comprising, after fulfilling the request using the second unused authenticated connection, adding the second unused authenticated connection to the first connection pool.

11. The method of claim 6, wherein authenticating at least one of the one or more second unauthenticated connections comprises authentication using one or more of user credentials, credit card information, debit card information, smart card information, location information, or biometric information.

12. A computer hardware system comprising:

a server;

a plurality of resources, wherein each of the resources is accessible by one or more devices via an authenticated connection between the server and the resource;

a tiered connection pool comprising;

a first connection pool comprising one or more previously used authenticated connections with a first resource of the plurality of resources, wherein the one or more previously used authenticated connections have been used to fulfill a previous request provided by a first device of the one or more devices enabling data associated with the previous request to be buffered and more readily available to fulfill a subsequent request; and

at least one of;

a second connection pool that is distinct from the first connection pool, the second connection pool comprising one or more unused authenticated connections with the first resource;

or a third connection pool that is distinct from the first connection pool, the third connection pool comprising one or more unauthenticated connections with the first resource,

wherein the server is configured to;

determine whether at least one of the one or more previously used authenticated connections is available to fulfill a request from the first device to access at least one of the plurality of resources, and responsive to determining that at least one of the one or more previously used authenticated connections is available, fulfill the request using the at least one of the one or more previously used authenticated connections.

13. The system of claim 12, wherein the tiered connection pool includes the second connection pool;

and

wherein the server is configured to;

responsive to determining that at least one of the one or more previously used authenticated connections is not available;

determine whether at least one of the one or more unused authenticated connections is available to fulfill the request from the first device to access at least one of the plurality of resources; and

responsive to determining that at least one of the one or more unused authenticated connections is available, fulfill the request using the at least one of the one or more unused authenticated connection.

14. The system of claim 12, wherein the tiered connection pool includes the third connection pool;

and wherein the server is configured to;

responsive to determining that at least one of the one or more previously used authenticated connections is not available;

determine whether at least one of the one or more unauthenticated connections is available to fulfill the request from the first device to access at least one of the plurality of resources; and

responsive to determining that at least one of the one or more unauthenticated connections is available, authenticate the at least one of the one or more unauthenticated connections and fulfill the request using the at least one of the one or more unauthenticated connection.

15. The system of claim 14, wherein the server is configured to, after the at least one of the one or more unauthenticated connections is authenticated and used, add the at least one of the one or more unauthenticated connections to the first connection pool.

16. The system of claim 12, wherein the server is configured to, responsive to determining that at least one of the one or more previously used authenticated connections is not available:

establish a new connection with at least one of the plurality of resources;

authenticate the new connection; and

fulfill the request using the new connection.

17. The system of claim 16, wherein the server is configured to, after the new connection is authenticated and used, add the new connection to the first connection pool.