Conditional User Credentials Server Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing user credential systems lack effective mechanisms to enforce temporal and geographic conditions, leading to unauthorized access when conditions are not met, as users can manipulate time and location on their devices to circumvent restrictions.

Innovation Solution

Implementing a system where client devices and servers verify user credentials by checking against predefined temporal and geographic conditions, using GPS, Wi-Fi triangulation, and network connectivity to ensure that credentials are only displayed and validated within valid time and location parameters, and notifying users of impending condition violations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If users can freely access and display credentials on their devices, then ease of operation is improved, but security and reliability deteriorate because users can manipulate time and location settings to circumvent restrictions

Engineering Contradiction:
Improvecredential display convenienceVSAvoidcondition enforcement reliability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a server as an intermediary between the user's client device and the credential validation system. The server receives requests from the client device, checks whether temporal and geographic conditions are satisfied by comparing device data against credential requirements, and returns validation results. This intermediary architecture prevents users from directly manipulating credential validity since the server performs the authoritative verification, thus resolving the contradiction between ease of operation and reliability of condition enforcement.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If the system implements server-based validation of temporal and geographic conditions, then reliability of condition enforcement is improved, but device complexity and processing requirements increase

Engineering Contradiction:
Improvecondition validation accuracyVSAvoidsystem architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the complex validation logic and condition checking computations from the client device and relocates them to the server. The client device only needs to send requests containing minimal data (current time, location coordinates) and receive validation results, while the server performs the heavy lifting of comparing this data against credential conditions. This extraction reduces client device complexity while maintaining high reliability through server-based validation.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If the system continuously monitors user location and time to enforce credential conditions, then security is improved, but energy consumption and processing overhead increase

Engineering Contradiction:
Improvecredential validity verificationVSAvoiddevice energy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements periodic action by having the client device check credential conditions only when the user attempts to display or use a credential, rather than continuously monitoring in the background. The device retrieves current time and location data on-demand, sends validation requests to the server only when needed, and receives responses only at these periodic intervals. This approach maintains security through verification while significantly reducing energy consumption compared to continuous monitoring.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS10164957B1Conditional user credentials
Publication Date: 2018.12.25 STRATEGY INC
  • US10164957B1 patent drawing
  • US10164957B1 patent drawing
  • US10164957B1 patent drawing

AI summary

In one implementation, a processing system receives a request from a user to output a representation for a credential at a client device, the credential being associated with the user. In response to receiving the request from the user to output the representation for the credential, the processing system accesses data identifying one or more conditions associated with the credential. The processing system then determines that at least one of the one or more conditions associated with the credential is not satisfied. And then, in response to determining that the at least one of the one or more conditions associated with the credential is not satisfied, the processing system denies the request from the user to output the representation for the credential at the client device.