Optimized access control for network services
A method including transmitting, by an infrastructure device to a distributor device, an invitation link to enable the distributor device to distribute to a user device network services provided by the infrastructure device; transmitting, by the infrastructure device to the distributor device based on the distributor device activating the invitation link, seed information to be utilized by the distributor device to determine a distributor key pair including a distributor public key and a distributor private key; receiving, by the infrastructure device from the distributor device, an action request related to an action to be performed regarding the network services, a portion of the action request being signed based on utilizing the distributor private key; and enabling, by the infrastructure device, performance of the action regarding the network services based on validating the action request by utilizing the distributor public key is disclosed.
1. A method, comprising:
transmitting, by an infrastructure device to a distributor device, an invitation link to enable the distributor device to distribute to a user device network services provided by the infrastructure device;
transmitting, by the infrastructure device to the distributor device based at least in part on the distributor device activating the invitation link, seed information to be utilized by the distributor device to determine a distributor key pair including a distributor public key and a distributor private key;
receiving, by the infrastructure device from the distributor device, an action request related to an action to be performed regarding the network services, a portion of the action request being signed based at least in part on utilizing the distributor private key; and
enabling, by the infrastructure device, performance of the action regarding the network services based at least in part on validating the action request by utilizing the distributor public key.
2. The method of claim 1 , wherein transmitting the invitation link includes transmitting the invitation link including a static portion to enable routing of the distributor device to a server associated with the infrastructure device and a dynamic portion indicating an expiration time of the invitation link.
3. The method of claim 1 , wherein transmitting the invitation link includes transmitting the invitation link including a static portion to enable routing of the distributor device to a server associated with the infrastructure device and a dynamic portion indicating a limited number of times the link may be activated.
4. The method of claim 1 , wherein transmitting the invitation link includes transmitting the invitation link including a static portion to enable routing of the distributor device to a server associated with the infrastructure device and a dynamic portion including a unique identifier that identifies the distributor device.
5. The method of claim 1 , wherein transmitting the seed information includes transmitting a script to be executed by the distributor device to determine the distributor key pair.
6. The method of claim 1 , wherein transmitting the seed information includes transmitting unique information associated with the distributor device to enable the distributor key pair to be unique to the distributor device.
7. The method of claim 1 , further comprising:
determining the identity of the distributor device based at least in part on information included in the action request, and
retrieving the distributor public key based at least in part on determining the identity of the distributor device to enable validating the action request.
8. An infrastructure device, comprising:
a memory; and
a processor communicatively coupled to the memory, the memory and the processor being configured to:
transmit, to a distributor device, an invitation link to enable the distributor device to distribute to a user device network services provided by the infrastructure device;
transmit, to the distributor device based at least in part on the distributor device activating the invitation link, seed information to be utilized by the distributor device to determine a distributor key pair including a distributor public key and a distributor private key;
receive, from the distributor device, an action request related to an action to be performed regarding the network services, a portion of the action request being signed based at least in part on utilizing the distributor private key; and
enable performance of the action regarding the network services based at least in part on validating the action request by utilizing the distributor public key.
9. The infrastructure device of claim 8 , wherein, to transmit the invitation link, the memory and the processor are configured to transmit the invitation link including a static portion to enable routing of the distributor device to a server associated with the infrastructure device and a dynamic portion indicating an expiration time of the invitation link.
10. The infrastructure device of claim 8 , wherein, to transmit the invitation link, the memory and the processor are configured to transmit the invitation link including a static portion to enable routing of the distributor device to a server associated with the infrastructure device and a dynamic portion indicating a limited number of times the link may be activated.
11. The infrastructure device of claim 8 , wherein, to transmit the invitation link, the memory and the processor are configured to transmit the invitation link including a static portion to enable routing of the distributor device to a server associated with the infrastructure device and a dynamic portion including a unique identifier that identifies the distributor device.
12. The infrastructure device of claim 8 , wherein, to transmit the seed information, the memory and the processor are configured to transmit a script to be executed by the distributor device to determine the distributor key pair.
13. The infrastructure device of claim 8 , wherein, to transmit the seed information, the memory and the processor are configured to transmit unique information associated with the distributor device to enable the distributor key pair to be unique to the distributor device.
14. The infrastructure device of claim 8 , wherein the memory and the processor are configured to:
determine the identity of the distributor device based at least in part on information included in the action request, and
retrieve the distributor public key based at least in part on determining the identity of the distributor device to enable validating the action request.
15. A non-transitory computer-readable medium configured to store instructions, which when executed by a processor associated with an infrastructure device, cause the processor to:
transmit, to a distributor device, an invitation link to enable the distributor device to distribute to a user device network services provided by the infrastructure device;
transmit, to the distributor device based at least in part on the distributor device activating the invitation link, seed information to be utilized by the distributor device to determine a distributor key pair including a distributor public key and a distributor private key;
receive, from the distributor device, an action request related to an action to be performed regarding the network services, a portion of the action request being signed based at least in part on utilizing the distributor private key; and
enable performance of the action regarding the network services based at least in part on validating the action request by utilizing the distributor public key.
16. The non-transitory computer-readable medium of claim 15 , wherein, to transmit the invitation link, the processor is configured to transmit the invitation link including a static portion to enable routing of the distributor device to a server associated with the infrastructure device and a dynamic portion indicating an expiration time of the invitation link.
17. The non-transitory computer-readable medium of claim 15 , wherein, to transmit the invitation link, the processor is configured to transmit the invitation link including a static portion to enable routing of the distributor device to a server associated with the infrastructure device and a dynamic portion indicating a limited number of times the link may be activated.
18. The non-transitory computer-readable medium of claim 15 , wherein, to transmit the invitation link, the processor is configured to transmit the invitation link including a static portion to enable routing of the distributor device to a server associated with the infrastructure device and a dynamic portion including a unique identifier that identifies the distributor device.
19. The non-transitory computer-readable medium of claim 15 , wherein, to transmit the seed information, the processor is configured to transmit a script to be executed by the distributor device to determine the distributor key pair.
20. The non-transitory computer-readable medium of claim 15 , wherein, to transmit the seed information, the processor is configured to transmit unique information associated with the distributor device to enable the distributor key pair to be unique to the distributor device.