Blockchain Token Authentication for Cross-Service Login Trust
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face an informational burden with multiple authentication mechanisms across different applications or services, and existing single sign-on systems lack trust and require extensive configuration for new services, leading to security and convenience issues.
Innovation Solution
A unified user device authentication mechanism using blockchain technology, employing cryptographic tokens (non-fungible tokens) to authenticate login requests, verifying the user's control over the token and its trusted creation address, and generating a cryptographic token upon successful login to enable seamless access across services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional single sign-on systems are used to enable maintaining a single sign-on for different systems, then authentication convenience is improved, but trust security deteriorates because there is still a single set of credentials used for many systems and extensive configuration is needed for each new application or service
Solution Approach 1:
The patent segments authentication credentials into application-specific credential sets stored on the user device, rather than using a single centralized credential set. Each application or service has its own encrypted credential set that is independently managed and stored locally on the user's device, eliminating the trust dependency on a central single sign-on server while maintaining authentication convenience.
2Reliability
If each application or service maintains separate login credentials and mechanisms, then trust security is improved, but authentication convenience deteriorates due to the informational burden on users to keep track of multiple authentication mechanisms
Solution Approach 1:
The patent merges multiple application-specific credential sets into a unified local storage system on the user device. The credential manager consolidates encrypted credentials for multiple applications and services in one location, allowing users to access all credentials through a single interface without needing to remember separate authentication mechanisms for each service.
Solution Approach 2:
The patent introduces a credential manager as an intermediary component that mediates between applications and stored credentials. This intermediary automatically retrieves and manages credential sets for different applications, eliminating the need for users to manually track and input multiple authentication mechanisms while maintaining the security benefits of separate credential management.
3Reliability
If extensive configuration is performed to enable each new application or service to connect to a single sign-on system, then authentication security is improved, but device complexity deteriorates due to the configuration overhead
Solution Approach 1:
The patent implements a self-service mechanism where the credential manager automatically generates, stores, and manages credential sets for new applications or services without requiring manual configuration. When a new application is installed, the system automatically creates an encrypted credential set and stores it locally, eliminating the extensive configuration process while maintaining security through application-specific credentials.
Data Source
AI summary
Methods and systems are described herein for novel uses and/or improvements in application or service authentication for a provider of disparate applications and/or services using blockchain technology. As one example, a method and a system are described herein for a unified user device authentication mechanism across multiple lines of service using cryptographic tokens. The system may receive, as part of a login request from a user, an address associated with a cryptography-based storage application, a cryptographic signature, and an identifier associated with a cryptographic token. The system may verify that the cryptographic token is valid and that the cryptography-based storage application controls the cryptographic token to grant the user access to the application or line of service.