Authentication Server for Cross-App Login via Blockchain
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing account registration methods for multiple applications are repetitive, insecure, and cumbersome, especially in environments with high security standards like iOS, where sharing information between applications is restricted, leading to lower usability and potential security risks.
Innovation Solution
A method utilizing PKI (Public Key Infrastructure) and an authentication server for simple and secure account registration across applications, where user identification information is stored and validated, allowing encrypted variable authentication information to be transmitted and decoded for secure account registration and login, without requiring personal information that could be bothersome to input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional account registration methods are used for multiple applications, then each application can be securely authenticated, but the registration process becomes repetitive and cumbersome for users
Solution Approach 1:
The patent implements a universal authentication mechanism where a user's account registered in one application can be used to authenticate across multiple different applications. The authentication server validates the user's identity once and issues tokens that can be presented to multiple applications, allowing one account to serve multiple functions and eliminating repetitive registration across different apps.
Solution Approach 2:
The system performs preliminary authentication by verifying the user's identity once through a trusted application before the user needs to access other applications. The authentication server pre-validates user credentials and stores authentication results, so subsequent applications can rely on this pre-performed verification rather than requiring fresh authentication each time.
2Ease of operation
If login delegation is used for account registration, then user input is reduced, but security is compromised because external parties can access sensitive information
Solution Approach 1:
The patent introduces an authentication server as a trusted intermediary between applications and users. This server handles the sensitive authentication logic and information verification centrally, allowing applications to delegate authentication requests without directly handling sensitive user data. The intermediary maintains security by controlling what information is shared and with whom.
Solution Approach 2:
The system replaces manual information sharing mechanisms with cryptographic token-based authentication. Instead of applications directly accessing or sharing user information, the system uses digitally signed tokens and cryptographic proofs that mechanically verify identity without exposing sensitive data, substituting a secure automated system for manual information handling.
3Reliability
If personal information is collected for account registration, then authentication can be performed, but security risks increase due to potential data leakage
Solution Approach 1:
The patent extracts and separates the authentication function from personal information storage. The system uses cryptographic keys and tokens that can verify identity without requiring applications to store or process sensitive personal data. The authentication server holds the necessary information securely, extracting only the minimal verification needed while leaving sensitive data protected in a centralized secure location.
Solution Approach 2:
The system uses disposable authentication tokens that are valid for single-use or limited-time verification. Instead of storing persistent personal information that could be leaked, the system generates temporary cryptographic proofs that serve their authentication purpose and then become obsolete, reducing the window of opportunity for data leakage.
Data Source
AI summary
According to the present invention, a method for delegating a login via PKI-based authentication for a login request of a user by using a smart contract and a blockchain database is provided. In the method, when information requesting for delegating the login via an authentication app executed by a user terminal is acquired from a service-providing app, a service-providing server transfers authentication request response information to the service-providing app, and when server challenge request information is acquired after an authentication redirection request of the service-providing app is transferred to the authentication app, the service-providing server transfers server challenge request response information to the authentication app, thereby supporting determination of whether certificates of the server and the app are valid, and if the certificates are valid, the service-providing server transfers an access token to the service-providing app, thereby enabling the service-providing app to use the service, and thus processing the login.