Application Authentication via Communication Client Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face frustration and inefficiency when repeatedly entering authentication details for each session to access a communication system through applications like web browsers, leading to potential avoidance of accessing the system.
Innovation Solution
A method where a communication client already authenticated on a user terminal provides authentication data to an application, allowing the application to authenticate with the communication system on behalf of the user without requiring the user to enter credentials each time, using verified authentication data transmitted through the client and verified by the communication system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the user enters authentication details for each session to access the communication system through the web browser, then the security and proper authentication is ensured, but the user experience deteriorates due to frustration and time consumption
Solution Approach 1:
The communication client performs authentication in advance and stores the authentication details locally. When the web browser needs to access the communication system, it retrieves the pre-stored authentication details from the communication client, eliminating the need for the user to re-enter credentials for each session while maintaining security through the established authentication framework
2Duration of action of stationary object
If the web browser stores session identifiers to maintain authentication state, then the authentication persistence is improved, but the security risk increases as the browser may access the communication system without fresh user verification
Solution Approach 1:
The communication client acts as an intermediary between the web browser and the communication system. It verifies and manages authentication details, providing them to the web browser only after validation. This intermediary layer ensures that authentication persistence is maintained through proper session management while security is preserved through the client's verification process
3Ease of operation
If the application uses the client's authentication data to access the communication system, then the ease of access is improved by eliminating repeated authentication, but the device complexity increases due to the authentication data transmission mechanism
Solution Approach 1:
The authentication functionality of the communication client is merged with the web browser's access mechanism. The client's authentication module and the browser's session management are integrated through a unified authentication data transmission protocol, allowing the browser to leverage the client's existing authentication infrastructure without requiring separate complex authentication systems
Data Source
AI summary
Embodiments describe transmitting authentication data from an application to a communication system. The communication system verifies the authentication data transmitted from the application, and on the basis that the authentication data is verified, the communication system authenticates the application for accessing the communication system on behalf of a user. Prior to the transmitting step the authentication data is provided from the communication system to the client, and then from the client to the application. The verifying step comprises determining that the authentication data transmitted from the application corresponds to the authentication data provided from the communication system to the client, such that the application is authenticated for accessing the communication system on behalf of the user on the basis of the client's authentication with the communication system.