Authentication Application Inactive Mode Transition for Secure Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for authenticating users to access restricted digital content often require complex and cumbersome procedures, compromising user-friendliness and security, especially in the context of increasing online transactions.
Innovation Solution
A computer-implemented method that involves an authorization server requesting user credentials from a communication device, forcing an authentication application into an inactive mode, and requiring a pre-configured personal authentication procedure to transition to active mode, thereby ensuring secure access to restricted content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complex authentication procedures are used to ensure high security, then security level is improved, but ease of operation deteriorates
Solution Approach 1:
The authentication application on the user's device performs self-service by automatically detecting the active application and initiating authentication without requiring the user to manually select or configure authentication parameters. The system serves itself by using the currently active application as the authentication target, eliminating the need for complex user configuration while maintaining security.
Solution Approach 2:
The authentication application acts as an intermediary between the user and the service provider. It receives authentication requests, performs the authentication procedure using biometric or other secure methods, and returns authentication results. This intermediary layer simplifies the user experience while maintaining high security standards through automated credential verification.
2Reliability
If multiple user actions are required for authentication, then security level is improved, but device complexity deteriorates
Solution Approach 1:
The authentication credentials and verification mechanisms are pre-configured and stored securely in the authentication application on the user's device. When authentication is needed, the system performs preliminary verification by detecting the active application and automatically initiating the authentication process with pre-stored credentials, eliminating the need for complex real-time configuration or multiple manual actions.
3Reliability
If personal information is stored on the server, then authentication capability is improved, but ease of operation deteriorates due to cumbersome procedures
Solution Approach 1:
The patent extracts sensitive authentication credentials and personal information from the remote server and stores them locally in the authentication application on the user's device. This extraction eliminates the need for users to repeatedly transmit personal information over the network or remember multiple credentials, simplifying the authentication process while maintaining security through local secure storage and automated verification.
Data Source
Figure 1
Figure 2
AI summary
The present invention relates to a computer implemented method of authenticating a user to grant the user access to restricted digital content. The method comprising the steps of: receiving, by an authorization server, a request from said communication device, to access said restricted content; requesting, by said authorization server, said user of said communication device to input user credentials;obtaining, by said authorization server, said user credentials from said communication device; sending, by said authorization server, to an application authenticated by said user with user credentials and running on said communication device, a command for forcing said application on said communication device to an inactive mode, and wherein said application is configured for user interaction in an active mode and for switching from said inactive mode to said active mode upon said user of said communication device to successfully complete a pre-configured personal authentication procedure; receiving, by said authorization server, from said application running on said communication device, an acceptance code, upon a successful transition of said application on said communication device from said inactive mode to said active mode; authorizing, by said webserver, upon receiving said acceptance code, said user of said communication device to access said restricted content.