Authentication Key Distribution via Identity Certificates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for distributing authentication keys to managed applications on client devices lack secure and efficient mechanisms, particularly in enterprise environments where secure access control and data protection are crucial.
Innovation Solution
The proposed solution involves using identity certificates installed on client devices through configuration profiles, managed by enterprise mobility management (EMM) services, which leverage operating system APIs to authenticate users and distribute authentication tokens securely, ensuring only authorized applications access resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If authentication keys are distributed through traditional channels, then distribution speed is improved, but security is worsened
Solution Approach 1:
The patent introduces a management service as an intermediary between the identity certificate authority and managed applications. This mediator receives authentication requests, validates identity certificates, and distributes authentication keys through a controlled process. The intermediary ensures security by verifying device enrollment status and certificate validity before key distribution, while maintaining efficiency through automated validation and key delivery mechanisms.
2Reliability
If device authentication is required before key distribution, then security is improved, but processing time is worsened
Solution Approach 1:
The patent implements preliminary action by requiring devices to enroll with the management service and obtain identity certificates before authentication key distribution. This enrollment process, including certificate installation and device registration, is completed in advance. When authentication is needed, the management service quickly validates the pre-established certificate and device status, significantly reducing actual authentication processing time while maintaining strong security controls.
3Ease of operation
If managed applications are installed through EMM infrastructure, then device control is improved, but system complexity is worsened
Solution Approach 1:
The management service implements multi-functionality by combining device enrollment, identity certificate management, application installation coordination, and authentication key distribution into a single unified system. This universal approach allows the EMM infrastructure to handle multiple management tasks through standardized processes and APIs, reducing operational complexity despite the comprehensive control capabilities provided to administrators.
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
Disclosed are various examples for facilitating distribution of an authentication code to installation of managed applications. An identity certificate is sent to a device by installing a configuration profile on the client device. The configuration profile includes the identity certificate. A management service can also initiate installation of a managed application. The identity certificate can be used to authenticate the client device so that an authentication key can be provided to the managed application.