Centralized Authentication Server for Single Sign-On Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer systems require multiple username and password combinations for accessing different computers on a network, leading to user inconvenience and increased authentication frequency.
Innovation Solution
A single-login system that uses a login server to manage authentication for multiple computer systems, allowing users to access multiple systems with a single username and password pair and enabling single-signon and single-signoff functionality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple username and password combinations are used for accessing different computers on a network, then access control security is maintained, but user convenience deteriorates and authentication frequency increases
Solution Approach 1:
The patent introduces a centralized authentication server as an intermediary between users and multiple computer systems. The server stores a single username-password pair and generates dynamic session tokens that are distributed to various systems. This mediator allows users to access multiple systems with one credential set while maintaining security through the server's centralized control and token validation mechanisms.
Solution Approach 2:
The patent transforms the authentication parameter from multiple static username-password pairs to a single credential set combined with dynamic session tokens. The authentication server changes the state of authentication by issuing time-limited tokens with specific permissions, allowing the same user credentials to provide access to multiple systems without repeating the password verification process.
2Reliability
If multiple username and password combinations are required for different computer systems, then individual system security is preserved, but authentication time and frequency increase
Solution Approach 1:
The authentication server performs preliminary authentication by verifying the user's single username-password pair once, then pre-generates session tokens that encapsulate authentication results. These tokens are distributed to multiple systems in advance, eliminating the need for repeated authentication verification at each system and significantly reducing authentication time across the network.
Solution Approach 2:
The patent creates copies of authentication credentials in the form of session tokens that are distributed from the central authentication server to multiple computer systems. Each system receives a token copy that proves the user's authenticated status without requiring the original password, allowing rapid verification through token validation instead of full authentication cycles.
3Ease of operation
If a centralized authentication system is implemented to reduce credential management, then user convenience improves, but system complexity increases
Solution Approach 1:
The centralized authentication server is designed with multi-functionality to handle multiple tasks: storing user credentials, generating session tokens, validating tokens from various systems, and managing user permissions. By consolidating these diverse functions into a single universal system, the patent reduces the need for multiple separate authentication mechanisms across different computer systems, managing complexity through functional consolidation rather than proliferation.
Data Source
AI summary
A method and system for logging into and providing access to multiple computer systems via the Internet or other communications network using a single authenticating process (e.g. username and password).