Automatic Realm Selection for Federated Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cloud computing environments, users face difficulties in accessing complex cloud computing resources due to the need to manually select cryptic realm identifiers, which complicates the authentication process and increases the risk of password attacks.
Innovation Solution
A method and system that maintain a mapping of usernames and realms, allowing users to authenticate by entering a username and a time-based one-time password code (TOTP), where the system automatically determines the correct realm and requests a credential for authentication, thereby eliminating the need for manual realm selection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If manual realm selection is implemented, then users can access specific cloud computing realms, but the authentication process becomes complex and user-friendly experience deteriorates
Solution Approach 1:
The patent introduces an intermediary mechanism (automatic realm selection system) that mediates between the user and the complex realm identifiers. The system automatically determines the target realm based on the username and TOTP code, eliminating the need for users to manually navigate complex realm selection interfaces while maintaining secure access control.
Solution Approach 2:
The patent extracts the realm selection function from the user's manual操作流程 and transfers it to the authentication system. By separating the realm determination logic from user interaction, the system simplifies the authentication process while maintaining the necessary security controls.
2Reliability
If second-factor authentication with TOTP is implemented, then security against password attacks is improved, but the authentication process becomes more cumbersome
Solution Approach 1:
The patent merges the realm selection process with the TOTP validation process into a single automated flow. Instead of requiring users to separately manage realm selection and second-factor authentication, the system combines these operations, automatically determining the realm based on the TOTP code provided by the authentication application.
Solution Approach 2:
The system performs preliminary actions by pre-configuring the mapping between usernames, TOTP codes, and realms. This allows the authentication system to automatically determine the correct realm before the user needs to provide credentials, streamlining the authentication process while maintaining security.
3Reliability
If cryptic realm identifiers are used, then security of cloud computing resources is improved, but user ability to remember and select realms deteriorates
Solution Approach 1:
The patent introduces an intermediary mechanism that translates between user-friendly usernames and cryptic realm identifiers. The system automatically resolves the target realm based on the username and TOTP code, allowing users to interact with simple identifiers while the system handles the complex encrypted realm IDs in the background.
Data Source
AI summary
In an approach for authentication of a username, a processor maintains a mapping of usernames and realms. A processor receives a username and a time-based one-time password code (TOTP code) for the username based on an authentication application. A processor, upon receiving the TOTP code: determines a realm from the mapping based on the received username and the received TOTP; and requests an entry of a credential relating to the username in the realm. A processor, upon receiving of the requested credential, authenticates the username by determining that the received credential matches an expected credential for the realm.