Browser-Independent Authentication Data Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security systems face challenges in maintaining authentication across multiple browsers on a client device, requiring multiple HTTP redirects for domain authorization and lacking browser-independent authentication data storage, which increases the number of authentication processes and redirects.
Innovation Solution
A method where a processing node determines the authentication status of a client device and provides instructions to generate a browser-independent login environment, allowing users to input login data and store authentication data, reducing the need for redirects and enabling authentication data to be shared across different browsers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If cookies are used to track authentication status, then authentication state can be maintained in client browser, but authentication data cannot be shared across multiple browsers on the same device
Solution Approach 1:
The patent introduces a server-side data store as an intermediary between the client device and authentication system. This server-side storage acts as a mediator that holds authentication data centrally, allowing any browser on the device to access the same authentication state without relying on browser-specific cookies. The server-side data store bridges the gap between multiple browsers, enabling shared authentication data while maintaining security through server-controlled access.
2Reliability
If authorization cookies are created for every new domain visited, then domain authorization can be provided, but the number of HTTP redirects increases
Solution Approach 1:
The patent implements preliminary action by pre-establishing domain authorization data on the server-side data store before the client needs to access it. When a user first visits a domain, the system proactively stores the authorization information server-side. Subsequent visits to the same domain or other domains can then retrieve this pre-stored authorization data without requiring multiple redirect cycles, significantly reducing the time loss associated with repeated authentication redirects.
Data Source
AI summary
Methods, systems, and apparatus, including computer program products, for distributed security system authorization. Client device authentication instructions are executed on a client device to determine if authentication data accessible by the client device authentication instructions are stored at the client device. If the authentication data are stored at the client device, the client device authentication instructions generate authenticated user data and store the authenticated user data at the client device. If the authentication data are not stored at the client device, the client device authentication instructions generate a login environment that allows a user of the client device to input login data. The login data are provided to a verification process that in response to verification provide the authentication data to the client device.