Cross-Domain Login Tracking via Centralized Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems face challenges in tracking user login statuses across independent systems, leading to repetitive login requirements and increased server-side resource consumption when accessing restricted content on different domains, which can annoy users and reduce traffic.

Innovation Solution

Implementing a method that uses cookies to track login statuses across a distributed system, where a user device's cookies are used to initiate communication between domain systems, allowing for centralized or decentralized authentication to determine active login states and grant access without additional login validation when the status is active.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If server-side tracking of cookie data is used to determine login status, then access to web site can be granted without additional login validation, but the technique is limited to a particular domain system and requires additional login validation when accessing another domain

Engineering Contradiction:
Improveaccess convenienceVSAvoidcross-domain applicability
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent implements a universal login status tracking mechanism that works across multiple domain systems. By establishing a centralized authentication system that maintains login state information accessible to multiple domains, the system enables a single login validation to serve multiple domain access needs, eliminating the need for separate login validations for each domain while maintaining security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent introduces a centralized authentication system as an intermediary between user devices and multiple domain systems. This intermediary maintains login status information and provides it to various domain systems, enabling them to recognize active login states without requiring direct trust relationships between each domain and the user device. The intermediary coordinates authentication across domain boundaries.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If additional login validation is required for each domain access, then security can be maintained, but user experience deteriorates and traffic is reduced

Engineering Contradiction:
ImprovesecurityVSAvoiduser experience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent performs preliminary authentication action at the first domain system and stores the login status information in a centralized authentication system. This preliminary action enables subsequent domain systems to recognize the active login state without requiring the user to provide credentials again. The system anticipates future access needs by maintaining authentication state information that can be quickly retrieved and validated across domains.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements a feedback mechanism where the centralized authentication system provides login status information back to domain systems. When a user accesses a domain, the system checks the centralized authentication database for existing login state information and returns appropriate feedback (authenticated or not authenticated) to the domain system, enabling automatic authentication decisions without repeated user input.

Inventive Principle:
Principle #23Feedback

3Reliability

If additional login validation is performed for each domain, then access control can be maintained, but server-side resources are consumed

Engineering Contradiction:
Improveaccess controlVSAvoidserver resource efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent extracts the login status tracking function from individual domain systems and places it in a centralized authentication system. Each domain system only needs to query the centralized system for login status information rather than maintaining and validating authentication states independently. This extraction reduces the computational burden on domain systems while maintaining robust access control through centralized verification.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS11075922B2Decentralized method of tracking user login status
Publication Date: 2021.07.27 ORACLE INT CORP
  • US11075922B2 patent drawing
  • US11075922B2 patent drawing
  • US11075922B2 patent drawing

AI summary

Systems and methods can track user login statuses across independent systems to determine whether to automatically grant access to a given domain. Specifically, when a new user device is detected at a system, one or more cookies are used to facilitate inter-system communications and to track session characteristics.