Combined User Authentication With Device and App Integrity Checks

The patent combines user authentication with device integrity verification into a single unified authentication process. The authentication server performs both functions simultaneously by receiving authentication credentials and device integrity information together, then validating both aspects before granting access. This merging approach enhances security by ensuring both user identity and device trustworthiness without significantly increasing process complexity.

The system performs device integrity verification as a preliminary action before completing user authentication. The authentication server checks device integrity information (such as hardware identifiers, software versions, or security certificates) before finalizing the authentication decision. This preliminary check prevents fraudulent access even when user credentials are compromised, as the device must also pass integrity verification.

Device integrity verification is performed as a preliminary action during the authentication process, allowing parallel processing of credential validation and device checking. This approach enables security enhancements without significantly increasing total authentication time, as both checks occur concurrently rather than sequentially.

The system utilizes device-provided integrity information (such as embedded security credentials or self-reported device states) that the device generates and maintains autonomously. This self-service approach reduces the computational burden on the authentication server and minimizes additional time required for verification, as the device already maintains its own integrity metrics.

The authentication server merges user credential validation with device integrity verification into a single processing workflow. Both authentication credentials and device integrity information are received, validated, and processed together in one unified decision-making process, rather than as separate independent checks. This reduces overall system complexity by consolidating multiple verification functions into a single integrated process.

The authentication server is designed to perform multiple functions simultaneously: validating user credentials, verifying device integrity, checking application legitimacy, and making access decisions. This multi-functional approach consolidates what would otherwise require multiple separate systems into a single universal authentication authority, reducing overall system complexity while maintaining comprehensive security.