Browser Plug-in Mediator for Device-Agnostic Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional remote authentication systems face challenges in managing secure access to local resources, particularly when interacting with a variety of hardware authentication devices across different platforms, leading to operability issues and security concerns.
Innovation Solution
An authentication-request handler is implemented on the client device to collect and manage authentication information, which can interact with hardware devices like biometric scanners, and issue authentication tokens for secure resource access, simplifying the authentication process and reducing the need for repeated authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the remote application directly interacts with multiple hardware authentication devices across different platforms, then authentication capability is improved, but device complexity and maintenance difficulty increase
Solution Approach 1:
The patent introduces a browser plug-in as an intermediary layer between the remote application and hardware authentication devices. The plug-in handles device-specific interactions, allowing the remote application to authenticate users across multiple platforms without directly managing device complexity. This mediator absorbs the complexity of diverse hardware interfaces while presenting a unified authentication interface to the application.
Solution Approach 2:
The browser plug-in serves multiple functions: it acts as a communication bridge between the remote application and various authentication devices, manages device-specific protocols, and provides a standardized interface for authentication. This multi-functional component consolidates what would otherwise require separate implementation for each device type, reducing overall system complexity.
2Ease of operation
If the remote application controls local resources for authentication, then authentication functionality is improved, but security risks increase
Solution Approach 1:
The browser plug-in serves as a secure intermediary that mediates between the remote application and local authentication resources. Instead of the application directly controlling sensitive local resources, the plug-in handles the interaction, providing a controlled interface that reduces security risks while maintaining authentication functionality.
Solution Approach 2:
The system leverages the browser's existing security model and the plug-in's embedded nature to perform authentication operations. The plug-in utilizes the browser's established security context and resource access mechanisms, rather than requiring the remote application to implement its own resource control logic, thereby reducing security vulnerabilities.
3Adaptability or versatility
If multiple authentication methods are supported, then user convenience is improved, but operability issues and bugs increase
Solution Approach 1:
The browser plug-in provides a universal interface that supports multiple authentication methods (biometric scanners, proximity card readers, smart card readers) through a single standardized component. This eliminates the need for separate implementation code for each authentication method, thereby reducing operability issues and bugs while maintaining support for diverse authentication approaches.
Data Source
AI summary
In various embodiments, the user of a client device that executes a remote application is authenticated by first receiving an HTTP or HTTPS request to authenticate the user from the remote application. The user is prompted for authentication information, and authentication information is obtained by communicating with a hardware device in electronic communication with the client device. The user's authorization to use the remote application is then verified using a computer processor and using the authentication information. Once the user is authenticated, embodiments of the invention use the authentication to program an authentication token for the user.