Cookie Association with Device Identifier for Global Logout
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
User identity management services fail to log out users globally across multiple online services, as logout events from one service are not effectively communicated to others, leading to incomplete logout from connected accounts.
Innovation Solution
A system and method that associates a cookie with a device identifier, allowing for the disassociation of user identifiers upon logout and reassociation with the same device identifier for subsequent users, ensuring seamless login and logout across services without deleting the cookie.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a user logs out from one relying party service, then the user expects to be logged out globally from all services, but the logout event is not communicated to other services so the user remains logged in elsewhere
Solution Approach 1:
The patent introduces a central identity management service as an intermediary that coordinates logout events across multiple relying party services. When a user logs out from one service, the identity management service receives the logout notification and propagates it to all other connected services, ensuring global logout consistency without requiring direct communication between all service pairs.
Solution Approach 2:
The system implements a feedback mechanism where logout events from any relying party service are transmitted back to the central identity management service, which then generates and distributes logout commands to all other services. This feedback loop ensures that the logout state is synchronized across the entire system.
2Adaptability or versatility
If multiple users share a single client device, then the device can access multiple online identities, but managing login/logout states for different users becomes complex
Solution Approach 1:
The patent segments the identity management by associating each user with a unique user identifier and maintaining separate login states for each user even when they share a single client device. The system tracks which user identifier is currently active for each relying party service, allowing multiple users to independently manage their login/logout states without interfering with each other.
Solution Approach 2:
The identity management service provides universal functionality that handles authentication and authorization for multiple users across multiple relying party services through a single centralized system. This multi-functional approach allows the same infrastructure to serve multiple users with different identity requirements without requiring separate management systems for each user.
Data Source
AI summary
A system and method for cookie association is disclosed. The system is communicatively coupled to a client via a network. The client has a first user and a second user. The system receives a first set of login information for the first user from the client. The first set of login information is for the first user. The system determines a first user identifier for the first user and a device identifier. The system associates the device identifier with the first user identifier. The system determines a cookie that includes a device identifier. The system receives logout information for the first user, and disassociates the device identifier from the first user identifier. The system receives a second set of login information for the second user from the client. The system associates a second user identifier with the device identifier.