Application Authentication Sharing via Identity Token Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face inconvenience and resource wastage due to the burden of remembering multiple authentication credentials for various applications on smart devices, leading to a need for improved authentication and authorization sharing between device applications.
Innovation Solution
A method for securely sharing user authentication and authorization between applications on computing devices, where a user can request to share authentication credentials by moving application icons, with the system obtaining an account identifier and encrypted identity token, verifying access, and sending these to a service provider server for verification and confirmation, allowing seamless access to multiple applications without re-entering credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users remember multiple authentication credentials for each application, then each application can be securely accessed, but user convenience deteriorates and computing resources are wasted
Solution Approach 1:
The authentication credential obtained from the first application is made universal and can be used to access the second application as well. The system enables a single authentication credential to serve multiple functions across different applications, eliminating the need for separate credentials for each application while maintaining security through verified identity tokens.
2Reliability
If users remember multiple authentication credentials for each application, then access control is maintained, but the burden on users increases
Solution Approach 1:
The system extracts and shares only the necessary authentication credential information (identity token) from the first application to the second application, rather than requiring users to manage all credentials locally. This extraction approach reduces the complexity of credential management while maintaining access control through verified identity tokens.
Solution Approach 2:
The system introduces an intermediary mechanism where authentication credentials are verified and shared through a controlled process between applications. The identity token acts as an intermediary that carries authentication information from one application to another, simplifying credential management while maintaining security.
3Ease of operation
If authentication credentials are shared between applications, then user access is simplified, but security risks increase
Solution Approach 1:
The system implements feedback mechanisms where the second application verifies the authenticity of the identity token received from the first application before granting access. This feedback loop ensures that shared credentials are validated, maintaining security while enabling simplified user access across applications.
Solution Approach 2:
The system uses short-lived identity tokens that are valid only for specific authentication purposes and time periods. These disposable-like tokens reduce the impact of potential security breaches, as they cannot be reused indefinitely, while still providing convenient access during their valid period.
Data Source
AI summary
Systems and methods for sharing authentication between applications include receiving a request to share authentication from a first application with a second application. An account identifier and identity token for a user are obtained from the first application. Access to a communication application associated with the account identifier is verified as available. The account identifier and identity token are sent to a second application server for verification with a first application server. A verification message is received in the communication application from the second application server. The verification message is determined to contain confirmation information and authentication is shared from the first application with the second application. Related systems and methods include retrieving information associated with an operating system to facilitate sharing authentication between applications.