Credential Synchronization for Shared Authentication Services
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional password managers cannot detect when multiple authentication portals use the same backend authentication service, leading to multiple entries needing updates when a password change occurs, resulting in inefficiencies and potential security vulnerabilities.
Innovation Solution
An apparatus and method that updates the password of credentials with matching usernames by identifying candidate credentials with the same username and password, allowing for simultaneous password updates across associated portals, with options for user confirmation and automatic synchronization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If password managers store credentials for multiple authentication portals independently, then each portal's credential can be managed separately, but when a password change occurs in a shared authentication service, multiple entries require manual updates increasing time consumption and error risk
Solution Approach 1:
The patent merges multiple credential entries that share the same authentication service backend into a unified credential object. When a password change occurs, the system automatically synchronizes the update across all associated authentication portals through this merged structure, eliminating the need for manual updates at each portal and significantly reducing time consumption.
Solution Approach 2:
The credential storage system is designed with multi-functionality to detect and handle shared authentication services. The system can identify when multiple portals use the same backend authentication service and automatically apply password updates across all of them, making the password manager adaptable to both unique and shared credential scenarios.
2Adaptability or versatility
If password managers treat each authentication portal as a separate credential entry, then portal-specific credentials can be managed independently, but credentials using the same backend authentication service cannot be detected as duplicates leading to redundant storage and update operations
Solution Approach 1:
The system performs preliminary detection and analysis of authentication service backends when credentials are initially stored. By identifying shared authentication services upfront and merging related credentials at that stage, the system prevents redundant storage and simplifies subsequent password update operations, avoiding the need for complex post-storage analysis.
3Reliability
If multiple credential entries are maintained for portals using the same authentication service, then each portal can be accessed independently, but password changes require updating multiple entries increasing the risk of login failures and security breaches
Solution Approach 1:
The system implements a feedback mechanism where password changes in one credential entry automatically trigger synchronized updates across all merged credential entries sharing the same authentication service. This real-time feedback loop ensures consistency across all portals, eliminating login failures caused by outdated credentials and reducing security risks from desynchronized password states.
Data Source
AI summary
For updating the password of a credential with a matching username, methods, apparatus, and systems are disclosed. One method includes storing a set of credentials, each credential in the set comprising a username and password. The method includes detecting an update to a first credential of the set of credentials, the first credential comprising a first username and a first stored password. Here, the update to the first credential indicates a new password to be associated with the first username. The method includes identifying a set of candidate credentials, each candidate credential having a username that matches the first username and a password that matches the stored password and updating the set of candidate credentials to comprise the new password.


