Browser Account Center Third-Party Login Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing browser applications cannot provide rapid login services for third-party websites, requiring users to manually enter usernames and passwords, leading to a redundant, labor-intensive, and error-prone process.
Innovation Solution
A computer system that receives a validation request from a third-party server, determines if an active communication session exists based on a session key, and sends an authorization request to allow the client terminal to access predefined data without further authentication, enabling abbreviated login through the browser application.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the browser application uses the same account center for rapid login to services from the same service provider, then login convenience is improved, but the ability to access third-party websites rapidly is lost
Solution Approach 1:
The account center is enhanced to perform multiple functions: it not only manages rapid login for services from the same service provider but also acquires and manages account information for third-party websites. The system can switch between different account centers (same-provider and third-party) based on the access target, making the login system universal across different website types.
Solution Approach 2:
When accessing third-party websites, the system introduces an intermediary mechanism where the browser application's account center acts as a mediator between the user and the third-party website. It acquires account information for the third-party site and uses this intermediate account information to enable rapid login, rather than requiring direct user input to the third-party site.
2Reliability
If the user manually enters username and password for third-party websites, then authentication security is maintained, but the login process becomes redundant and labor-intensive
Solution Approach 1:
The system performs preliminary action by pre-acquiring account information for third-party websites through the account center before the user actually needs to access them. This advance preparation stores the necessary login credentials, so when the user wants to access a third-party site, the information is already ready, eliminating the need for manual entry and reducing login time while maintaining security through pre-validated credentials.
3Adaptability or versatility
If the browser application establishes separate account centers for different service providers, then service specificity is improved, but system complexity increases
Solution Approach 1:
The system merges the functionality of multiple account centers into a unified browser application account center. Instead of having separate account centers for each service provider or third-party website, the invention combines them into a single account center that can manage multiple account information sets, switching between them as needed. This reduces structural complexity while maintaining the ability to access diverse services.
Data Source
AI summary
The current invention discloses methods, devices and systems for logging in a third party server through a browser application at a client terminal. After receiving a validation request from a third party server, the main server for the browser application may choose to grant or deny the request. The validation request, which may include a third party identifier, a user identifier, and a session key, can be triggered by a data access request from the browser application. If there is an active communication session between the client terminal and the server, the server may send an authorization request to the third party so that the third party server allows the client terminal to access non-sensitive data associated with the user identifier through the browser application without further validation of the data access request. The current invention provides additional convenience and security for third party login operations.