Authentication Application Inactive Mode Transition for Secure Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for authenticating users to access restricted digital content often require complex and cumbersome procedures, compromising user-friendliness and security, especially in the context of increasing online transactions.

Innovation Solution

A computer-implemented method that involves an authorization server requesting user credentials from a communication device, forcing an authentication application into an inactive mode, and requiring a pre-configured personal authentication procedure to transition to active mode, thereby ensuring secure access to restricted content.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If complex authentication procedures are used to ensure high security, then security level is improved, but ease of operation deteriorates

Engineering Contradiction:
Improvesecurity levelVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The authentication application on the user's device performs self-service by automatically detecting the active application and initiating authentication without requiring the user to manually select or configure authentication parameters. The system serves itself by using the currently active application as the authentication target, eliminating the need for complex user configuration while maintaining security.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The authentication application acts as an intermediary between the user and the service provider. It receives authentication requests, performs the authentication procedure using biometric or other secure methods, and returns authentication results. This intermediary layer simplifies the user experience while maintaining high security standards through automated credential verification.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If multiple user actions are required for authentication, then security level is improved, but device complexity deteriorates

Engineering Contradiction:
Improvesecurity levelVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The authentication credentials and verification mechanisms are pre-configured and stored securely in the authentication application on the user's device. When authentication is needed, the system performs preliminary verification by detecting the active application and automatically initiating the authentication process with pre-stored credentials, eliminating the need for complex real-time configuration or multiple manual actions.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If personal information is stored on the server, then authentication capability is improved, but ease of operation deteriorates due to cumbersome procedures

Engineering Contradiction:
Improveauthentication capabilityVSAvoidease of operation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent extracts sensitive authentication credentials and personal information from the remote server and stores them locally in the authentication application on the user's device. This extraction eliminates the need for users to repeatedly transmit personal information over the network or remember multiple credentials, simplifying the authentication process while maintaining security through local secure storage and automated verification.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentEP4004776B1A computer implemented method of authorizing a user of a communication device access to restricted content on a server
Publication Date: 2024.09.04 MOBYYOU BV
  • EP4004776B1 patent drawingFigure 1
  • EP4004776B1 patent drawingFigure 2

AI summary

The present invention relates to a computer implemented method of authenticating a user to grant the user access to restricted digital content. The method comprising the steps of: receiving, by an authorization server, a request from said communication device, to access said restricted content; requesting, by said authorization server, said user of said communication device to input user credentials;obtaining, by said authorization server, said user credentials from said communication device; sending, by said authorization server, to an application authenticated by said user with user credentials and running on said communication device, a command for forcing said application on said communication device to an inactive mode, and wherein said application is configured for user interaction in an active mode and for switching from said inactive mode to said active mode upon said user of said communication device to successfully complete a pre-configured personal authentication procedure; receiving, by said authorization server, from said application running on said communication device, an acceptance code, upon a successful transition of said application on said communication device from said inactive mode to said active mode; authorizing, by said webserver, upon receiving said acceptance code, said user of said communication device to access said restricted content.