Common Domain System for Cross-Domain User Recognition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Browsers have restricted the use of cookies by domains other than an originating domain, limiting the ability of services like secure remote commerce (SRC) to remember users and devices for subsequent transactions.
Innovation Solution
The implementation of a common domain system, where cookies are set and accessed through a common domain, allowing recognized users to recall credentials without being subject to third-party cookie restrictions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cookies are set by originating domains only, then browser security is improved, but user recognition capability deteriorates
Solution Approach 1:
The patent introduces a common domain as an intermediary between the originating domain and third-party services. The common domain sets first-party cookies that can be accessed by multiple services, enabling user recognition without requiring third-party cookie access. This mediator approach maintains browser security while achieving cross-service user identification.
2Object-affected harmful factors
If third-party cookie access is restricted, then privacy security is improved, but service functionality deteriorates
Solution Approach 1:
The patent segments the cookie-setting function from the cookie-accessing function. The common domain sets the cookies (segment 1), while individual services access them through the common domain (segment 2). This segmentation allows services to maintain functionality without direct third-party cookie access, thus preserving privacy security while enabling service operations.
3Reliability
If cross-domain cookie access is limited, then browser security is improved, but credential recall capability deteriorates
Solution Approach 1:
The common domain serves multiple functions: it sets cookies, stores credential information, and provides access to multiple services. By making the common domain universal, the system enables credential recall across different services without requiring each service to set its own cookies, thus maintaining browser security while preserving credential recall capability.
Data Source
AI summary
Systems and methods are provided for use in implementing a common domain to provide recognition of users. One example computer-implemented method includes receiving a recognition token associated with a profile and setting, via a browser accessing a common domain, a cookie in the browser where the cookie includes a recognition token. The method also includes, in response to a request for a service, via a user, through the browser accessing an entity domain associated with an entity, accessing the common domain and accessing, via the browser accessing the common domain, the cookie and submitting the cookie to a common domain server. The method further includes receiving, from the common domain server, a federated ID token associated with the recognition token for the service and retrieving, via the browser, the profile associated with the user based on the federated ID token.