Cross-Device SSO via Server-Issued Collaboration Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing single sign-on (SSO) technologies do not support seamless authentication across multiple mobile devices, requiring users to re-enter identity information each time they switch devices.
Innovation Solution
A system and method for SSO collaboration among multiple mobile devices, where a server issues an identity token to authenticate a user on a first device and generates a collaboration credential that allows secure access to services on other paired devices without additional login procedures, using data structures like JSON or XML, and cryptographic protocols for security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional SSO authentication is used on a single mobile device, then user authentication is secure and manageable, but users must re-enter identity information when switching to another mobile device
Solution Approach 1:
The patent implements a universal SSO system where a single set of credentials on a primary mobile device can authenticate across multiple devices (smartphone, tablet, laptop, desktop). The server generates device-specific authentication tokens that allow the same user account to function seamlessly across different device types, making the authentication system multi-functional and device-agnostic.
Solution Approach 2:
The system performs preliminary registration and pairing between the primary mobile device and secondary devices before actual use. During this preliminary phase, the server establishes trusted relationships and pre-configures authentication capabilities, so that when users switch devices, the authentication is already prepared and requires no additional credential entry.
2Ease of operation
If SSO credentials are shared across multiple mobile devices, then user access convenience is improved, but security risks increase
Solution Approach 1:
The patent segments the authentication credentials into device-specific tokens rather than sharing a single universal credential. Each secondary device receives a unique authentication token that is tied to that specific device's identity and characteristics. This segmentation ensures that if one device is compromised, the security breach is isolated and does not automatically compromise other devices or the primary account.
Solution Approach 2:
The server acts as an intermediary that manages and verifies authentication tokens between the user's primary device and secondary devices. Rather than directly sharing credentials between devices, the server mediates the authentication process by issuing and validating device-specific tokens, ensuring that security protocols are maintained while enabling cross-device access.
3Reliability
If device-specific authentication is implemented for each mobile device, then security is maintained, but user convenience is reduced due to multiple logins
Solution Approach 1:
The patent merges the benefits of device-specific security with unified user authentication. By combining the primary mobile device's credentials with secondary device identifiers, the system creates a unified authentication approach where one set of user credentials automatically secures access across multiple devices. This merging eliminates the need for separate logins while maintaining device-specific security validation through the server's token verification process.
Data Source
AI summary
A system for, and method of, single sign-on collaboration among a plurality of mobile devices, includes a server for issuing a first identity token to subsequently authenticate a user of a first of the mobile devices to a service provider, and for generating and sending a collaboration credential to the first device based on the first identity token or user authentication. The first device sends the collaboration credential generated by the server to a second device paired with the first device. The server also issues a second identity token to subsequently authenticate to the service provider the user of the second device based on the collaboration credential received from the first device, to support single sign-on collaboration for the user across the plurality of mobile devices.