Universal Anonymous Cross-Site Authentication via Intermediary Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face the inconvenience of needing to register with multiple websites, each requiring personal information for authentication, and desire a method to access multiple websites with a single set of credentials while maintaining anonymity regarding their personal information.
Innovation Solution
An authentication server is used to provide cross-site authentication, allowing users to authenticate with multiple websites without providing identification information directly to each website, using challenge codes and session keys to verify user credentials while storing anonymous user profiles.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users register with multiple websites using personal information, then authentication reliability is improved, but personal information exposure increases and user convenience deteriorates
Solution Approach 1:
The patent introduces an authentication server as an intermediary between users and multiple websites. This mediator handles authentication centrally, allowing websites to verify user credentials without directly storing or exposing personal information. The authentication server acts as a trusted third party that enables cross-site authentication while maintaining user anonymity and minimizing data exposure.
2Reliability
If users register with multiple websites, then authentication reliability is improved, but ease of operation deteriorates
Solution Approach 1:
The authentication server provides universal authentication functionality across multiple websites. Instead of requiring separate registration for each site, users authenticate once through the universal authentication server, and their credentials are validated across all participating websites. This multi-functional approach consolidates multiple authentication processes into a single operation.
Solution Approach 2:
The authentication server mediates between users and multiple websites, handling authentication centrally. This eliminates the need for users to manually register with each website individually, significantly improving ease of operation while maintaining reliable authentication across all sites.
3Reliability
If websites store user personal information for authentication, then authentication reliability is improved, but loss of information increases
Solution Approach 1:
The patent extracts personal information storage from individual websites and consolidates it into a centralized authentication server. Websites no longer store user personal information locally; instead, they rely on the authentication server to provide verification. This extraction minimizes the information storage footprint at each website while maintaining authentication reliability through centralized management.
Solution Approach 2:
The authentication server serves as an intermediary that holds user authentication data centrally, removing the burden of personal information storage from individual websites. This mediator architecture allows websites to authenticate users without directly storing their personal information, reducing the risk of information breaches and data loss at each site.
Data Source
AI summary
The device may receive user information associated with a user. The device may generate a user profile for the user that stores user information and authentication confirmation information. The device may provide a particular cryptographic key and information identifying the user profile. The device may receive a request to authenticate a secure session for a user device from an application server. The device may obtain, based on the user identifier, the authentication confirmation information associated with the user from a data structure storing one or more user profiles. The device may validate the particular response to the particular challenge code based on the authentication confirmation information. The device may provide information to the application server indicating that the secure session is validated for the user device based on validating the authentication information.