Accelerated Authentication System for Partial Credential Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing user authentication process for network services is lengthy, particularly on mobile devices, due to the time required for users to input credentials, establish data channels, and verify user information, leading to wasted processing capacity and bandwidth.

Innovation Solution

Implementing an accelerated authentication system that allows for partial user credential verification before complete input, enabling early initiation of the authentication process and secure session setup, utilizing an accelerated authentication module or agent to reduce the overall authentication time.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the complete user authentication process is followed (user input, channel establishment, verification), then authentication security is ensured, but authentication time is significantly increased

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by initiating authentication processes before the user has completed credential input. The server begins establishing data channels and preparing authentication verification in advance, so that when the user submits complete credentials, the authentication is already near completion, significantly reducing perceived wait time while maintaining security

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The authentication process is segmented into distinct phases: a preliminary phase where the server proactively establishes channels and prepares verification, and a completion phase where user credentials are verified. This segmentation allows the time-consuming infrastructure setup to occur independently of user input timing, reducing the critical path duration

Inventive Principle:
Principle #1Segmentation

2Measurement precision

If the user device waits for complete authentication before performing other functions, then authentication accuracy is maintained, but device processing capacity is wasted

Engineering Contradiction:
Improveauthentication accuracyVSAvoiddevice processing efficiency
Core Design Contradiction:
Measurement precisionVSProductivity

Solution Approach 1:

The server performs preliminary authentication preparations including database query preparation and channel establishment before the user completes input. This shifts the computational burden from the user device to the server, allowing the device to remain productive during the authentication process while the server handles the time-consuming verification tasks

Inventive Principle:
Principle #10Preliminary action

3Stability of the object's composition

If the server processes authentication requests sequentially when busy, then system stability is maintained, but authentication response time increases

Engineering Contradiction:
Improvesystem stabilityVSAvoidauthentication response time
Core Design Contradiction:
Stability of the object's compositionVSLoss of time

Solution Approach 1:

When the server detects it is busy with other requests, it initiates preliminary authentication actions in the background (such as preparing verification routines and establishing communication channels) before the user's authentication request is fully processed. This background preparation reduces the actual processing time when the request reaches the authentication module, improving response time without compromising system stability

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS9979545B2Method and apparatus for accelerated authentication
Publication Date: 2018.05.22 NOKIA TECHNOLOGIES OY
  • US9979545B2 patent drawing
  • US9979545B2 patent drawing
  • US9979545B2 patent drawing

AI summary

Techniques for accelerated authentication include receiving first data that indicates a first portion of user credentials for a first user but not a second portion. It is verified whether the first portion of user credentials is valid. If the first portion of user credentials is valid, then second data that indicates a valid value for the second portion of user credentials for the first user is sent. Other techniques include receiving first data that indicates a first portion of user credentials for a first user but not a second portion of user credentials for the first user. A first message that indicates the first portion of user credentials is sent to a remote process that initiates authentication of the first user based on the first portion of user credentials before receiving second data that indicates the second portion of user credentials for the first user.