Credential Mapping Service for Single Sign-On
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face frustration and inefficiency due to the need for multiple sign-on credentials when accessing different web applications, especially across independent organizations, which can be time-consuming and inconvenient, particularly in financial contexts where timely access to up-to-date information is critical.
Innovation Solution
A client-server system with a reverse proxy server that authenticates a single set of credentials and provides access to multiple independent applications, using more secure credentials for system sign-on to enable single sign-on across non-public isolated applications, and correlating a single log-in credential with disparate financial sources for unified viewing of financial information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple independent applications require separate sign-on credentials, then each application can maintain its own security requirements, but users experience frustration and time loss due to multiple logins
Solution Approach 1:
The patent introduces a credential mapping service as an intermediary between the user and multiple applications. This service stores mappings between a single user credential and multiple application credentials, automatically translating the user's single login into the appropriate credentials for each application without requiring the user to manually enter multiple sets of credentials.
Solution Approach 2:
The system creates credential copies by storing multiple application-specific credentials in the credential mapping service, each associated with a user account. When authentication is needed, the service retrieves the appropriate credential copy for the target application rather than requiring the user to input credentials directly.
2Ease of operation
If a federation system is implemented to enable single sign-on across organizations, then user convenience improves, but the system requires complex cooperation agreements between disparate application providers
Solution Approach 1:
The credential mapping service acts as a mediator that eliminates the need for complex federation agreements between organizations. Instead of requiring direct trust relationships between multiple independent systems, the service centralizes credential management and handles the translation logic, simplifying the architecture to a single point of coordination.
Solution Approach 2:
The system enables self-service credential management where the credential mapping service automatically handles credential translation and application authentication without requiring manual configuration or agreement negotiations between application providers. The service autonomously manages the credential mappings and authentication processes.
3Reliability
If existing applications with weaker credentials are upgraded to use more secure credentials, then system security improves, but significant time and effort are required to modify each application
Solution Approach 1:
Instead of modifying existing applications to use stronger credentials, the system creates secure credential copies in the credential mapping service. The service stores and manages secure versions of credentials for applications that originally used weaker authentication, allowing these applications to benefit from enhanced security without code changes.
Solution Approach 2:
The system performs preliminary credential preparation by pre-storing and pre-validating secure credentials in the credential mapping service before they are needed for authentication. This advance preparation eliminates the need for real-time credential generation or application modification during the authentication process.
Data Source
AI summary
A method for permitting single sign-on to multiple independent applications in a single framework.