Centralized Authentication Provider for Multi-Service Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems, such as those using one-time passwords, burden users with managing multiple usernames and passwords and require service providers to handle authentication separately, leading to security vulnerabilities and increased administrative tasks.
Innovation Solution
A centralized authentication method where an authentication provider establishes a trust relationship with both service providers and user terminals, generating and verifying access codes to facilitate secure access across multiple services without the need for users to manage multiple credentials, thereby concentrating authentication tasks and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If one-time password authentication is used, then security is improved, but user complexity increases due to managing multiple usernames and passwords
Solution Approach 1:
The patent introduces a centralized authentication provider as an intermediary between users and multiple service providers. This authentication provider manages one-time password generation and verification, allowing users to authenticate to multiple services using a single username and the dynamically generated one-time password from the authentication provider, thereby eliminating the need to manage multiple credentials while maintaining security
Solution Approach 2:
The authentication provider is designed as a universal system that can authenticate users to multiple different service providers through a standardized protocol. The one-time password mechanism and trust relationship framework are universally applicable across different services, allowing users to access multiple services with a single authentication credential set
2Adaptability or versatility
If service providers handle authentication separately, then service autonomy is maintained, but authentication task burden increases
Solution Approach 1:
The patent extracts the authentication functionality from individual service providers and consolidates it into a dedicated authentication provider. Service providers no longer need to implement their own authentication logic,而是 rely on the centralized authentication provider through standardized protocols, thereby reducing their authentication task burden while maintaining their operational autonomy
Solution Approach 2:
The authentication system is segmented into distinct functional components: the authentication provider that handles credential management and one-time password generation, and the service providers that focus on service delivery. This segmentation allows each component to specialize in its core function, improving overall system efficiency
3Productivity
If centralized authentication is implemented, then authentication task burden is reduced, but system complexity increases due to establishing trust relationships
Solution Approach 1:
The patent establishes trust relationships between the authentication provider and service providers in advance, before actual authentication operations begin. This preliminary configuration of cryptographic keys and trust certificates eliminates the need for complex real-time trust negotiations during authentication, thereby reducing operational complexity while maintaining centralized authentication benefits
Data Source
AI summary
An authenticating method including establishing trust between an authentication provider and service provider; establishing trust between the authentication provider and authentication application installed in a terminal. The authentication provider, for each session, receives an access code request and connection information from the terminal; generates and stores the access code; sends the access code to the terminal; receives the access code from the authentication application; indicates verification of the access code to the authentication application and terminal; receives from the authentication application a request to grant access to the terminal; instructs the service provider to grant access; and sends a confirmation of the granted access to the terminal. An authenticated session between the terminal and the service provider is setup for providing services to the terminal.