Browser Auto-Fill Authentication Using Custom URL Protocols
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users spend significant time managing and submitting credentials across multiple webpages, leading to inefficient and time-consuming authentication processes, especially in large computing environments.
Innovation Solution
An authentication manager system, including a browser extension and central credential management webpage, uses custom URL protocols to automate the authentication process by intercepting URL navigation, extracting credential data, and auto-filling login forms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If manual credential management and submission is used across multiple webpages, then users maintain control over their authentication process, but users spend significant time managing and submitting credentials
Solution Approach 1:
The system pre-loads and stores credential data in a credential store before authentication is needed. When a user navigates to a protected webpage, the browser extension automatically retrieves and submits the pre-stored credentials without requiring user action, thereby resolving the time loss issue while maintaining security through user-initiated credential storage.
Solution Approach 2:
The automated authentication system enables the browser extension to independently manage credential submission without requiring user intervention. The extension automatically detects login forms, retrieves credentials from the credential store, and submits them, allowing the system to serve itself and eliminating the time users would otherwise spend on manual credential management.
2Ease of operation
If automated authentication is implemented using browser extensions, then authentication process is streamlined and time-consuming, but system complexity increases with browser extension and central credential management webpage
Solution Approach 1:
The authentication system is segmented into distinct functional components: a browser extension for credential retrieval and submission, a credential store for data management, and a central credential management webpage for configuration. This segmentation allows each component to perform its specific function independently, simplifying the overall operation while managing complexity through modular architecture.
Solution Approach 2:
The browser extension acts as an intermediary between the user's credentials and the webpages requiring authentication. It mediates the authentication process by automatically retrieving credentials from the credential store and submitting them to login forms, thereby simplifying user interaction while managing system complexity through a dedicated intermediary component.
3Productivity
If custom URL protocols are used to intercept navigation and extract credential data, then authentication automation is achieved, but security considerations arise from transparent credential access
Solution Approach 1:
Credentials are pre-stored in a secure credential store with user consent before authentication is needed. The browser extension retrieves credentials only when triggered by navigation to a protected webpage, ensuring that credential access is both fast (pre-loaded) and secure (user-initiated storage, controlled retrieval).
Solution Approach 2:
The system implements feedback mechanisms where users are notified when credentials are stored, retrieved, or submitted. This feedback loop ensures that users maintain awareness and control over their credential data, enhancing security while allowing rapid automated authentication when authorized.
Data Source
AI summary
A method for a website authentication is provided. The method includes receiving a reference uniform resource locator (URL) at a browser and determining whether the reference URL adheres to an authentication protocol including a credential identifier and a web authentication host URL. When the reference URL adheres to the authentication protocol, the method also includes extracting the credential identifier and the web authentication host URL from the reference URL. The method further includes obtaining credential data from a remote service using the credential identifier and sending web authentication instructions to the browser. The web authentication instructions include the web authentication host URL and the credential data.