Browser Identity Management for Multi-User Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current web browser technologies lack a system to provide a common identity across different web applications, requiring users to log in separately to each website and manage multiple accounts, which is cumbersome and insecure, especially when multiple users share the same computer.

Innovation Solution

A method is introduced where a web browser provides multiple identities associated with respective users, allowing users to select and use a graphical user interface element to access pre-stored identities and tokens for seamless authentication across multiple computing devices, eliminating the need for repeated login credentials.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If each third party website has its own authentication methods, then security is improved, but user convenience deteriorates due to multiple separate logins required

Engineering Contradiction:
Improveauthentication securityVSAvoidlogin convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a browser-based identity system that acts as an intermediary between users and multiple third-party websites. The browser stores identity information and tokens locally, automatically presenting them to websites during authentication. This mediator approach maintains the security of individual website authentication methods while eliminating the need for users to manually log in to each site separately, as the browser handles credential management and presentation automatically.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If multiple users share the same computer, then device utilization is improved, but authentication security deteriorates due to credential management difficulties

Engineering Contradiction:
Improvedevice sharing capabilityVSAvoidcredential security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments the authentication system by creating separate identity profiles within the browser for different users. Each user has their own stored identity information and tokens that are kept distinct and isolated. When users share a computer, the browser can switch between these segmented identities, allowing each user to access their own authenticated sessions without exposing or mixing credentials with other users, thus maintaining security while enabling device sharing.

Inventive Principle:
Principle #1Segmentation

3Reliability

If users manage multiple accounts separately, then account security is improved, but time consumption deteriorates due to repeated logins

Engineering Contradiction:
Improveaccount securityVSAvoidlogin time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary action by having the browser automatically store identity information and authentication tokens during the initial login process. These credentials are preliminarily prepared and stored in the browser's local storage. When the user returns to the same website, the browser automatically retrieves and presents these pre-stored credentials, eliminating the need for repeated manual logins while maintaining account security through the use of stored tokens and identity verification.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3127030B1Browser based identity with multiple login
Publication Date: 2021.06.09 GOOGLE LLC
  • EP3127030B1 patent drawingFigure 1
  • EP3127030B1 patent drawingFigure 2
  • EP3127030B1 patent drawingFigure 3

AI summary

A system provides a graphical user interface element in a browser. The browser provides multiple different identities for the browser, each of the multiple different identities associated with a different user, each of the multiple different identities being associated with a plurality of accounts. Upon receiving a selection of the graphical user interface element from a first user, the system matches the first user with a first identity that is stored by the browser and associated with the first user. Upon receiving a second selection of the graphical user interface element from a second user, the system matches the second user with a second identity that is stored by the browser and associated with the second user.