Client Device Identification for Web App Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing web application deployments face issues with misuse of access privileges, leading to revenue loss and system capacity degradation due to users attempting to avoid paying fees by using another user's privileges, necessitating improved protection and enforcement of application usage restrictions.
Innovation Solution
Implementing a client device information process that provides unique identification of client devices, enabling reliable determination of whether multiple applications are running on the same device, facilitating single sign-on (SSO) and multiple login prevention (MLP) capabilities to manage user access and enforce usage restrictions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If web applications allow access from multiple devices and browsers simultaneously, then user convenience and accessibility are improved, but misuse of access privileges increases leading to revenue loss and system capacity degradation
Solution Approach 1:
The patent introduces a client device information process as an intermediary component that sits between the web application and the user's device. This process collects device information (hardware identifiers, software characteristics, network details) and provides it to the web application, enabling the system to verify whether access requests originate from authorized devices without interfering with user convenience. The intermediary mechanism allows legitimate multi-device access while preventing privilege misuse.
Solution Approach 2:
The system implements feedback by continuously monitoring access patterns and comparing them against stored device information profiles. When a access request is received, the web application retrieves device information from the client process, compares it with authorized device profiles, and takes appropriate action (allow or block access). This feedback loop enables dynamic control of access privileges based on real-time device verification.
2Reliability
If device information collection is implemented to prevent misuse, then access control reliability is improved, but system complexity increases
Solution Approach 1:
The patent divides the access control system into separate functional segments: the client device information process (running on the user's device) and the web application (running on the server). The client process handles device information collection and local management, while the web application handles verification and access decisions. This segmentation reduces the complexity burden on any single component while maintaining overall system reliability.
3Ease of operation
If single sign-on capability is implemented across multiple devices, then user experience is improved, but difficulty in detecting and measuring actual device identity increases
Solution Approach 1:
The client device information process serves multiple functions: it collects device identifiers, characterizes hardware and software environment, monitors for device changes, and provides this information to multiple different web applications. This universal mechanism enables consistent device identification across different applications and devices, making SSO reliable without increasing detection difficulty.
Data Source
AI summary
The described technology provides for plural application processes including at least one application in a browser to reliably acquire device information that can be used by other processes to accurately determine whether the plural applications are running on the same client device and/or are associated with aspects of the same client device. The more reliable determination of the devices associated with respective application processes can be used for various purposes such as, for example, user access management capabilities such as improved single sign-on (SSO) capability and/or improved multiple login prevention (MLP) capability.