Device-Server Session Authentication for Privileged Application Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network communication methods lack effective security measures to manage privilege levels and authentication between devices and servers, particularly in environments with multiple applications, leading to potential security threats and unauthorized access.
Innovation Solution
A network communication method and apparatus that involves a device requesting server authentication, generating a device-server session based on authentication, and allowing applications to access content based on privilege levels, with the server determining and enforcing access permissions using session tokens and key information to ensure secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If network communication is enabled between device and server without authentication, then ease of operation is improved, but security level deteriorates
Solution Approach 1:
The patent implements authentication and session establishment before actual content access. The device authenticates with the server and obtains a session token in advance, which is then used for subsequent content requests. This preliminary authentication ensures security is established before operations begin, resolving the contradiction between ease of operation and security level.
2Reliability
If privilege level checks are implemented for each application, then security level is improved, but device complexity increases
Solution Approach 1:
The patent combines application identification and privilege level verification into a single session token validation process. When the server receives a content request, it extracts the application identifier from the request, checks the privilege level against the required level for the requested content, and validates the session token all in one operation. This merging reduces device complexity while maintaining security level.
3Reliability
If session tokens are generated and validated, then security level is improved, but loss of time increases
Solution Approach 1:
The session token is generated and validated in advance during the authentication phase, before actual content access operations. Once validated, the session token can be reused for multiple content requests without repeated authentication overhead. This preliminary action reduces time loss for subsequent operations while maintaining security level.
4Adaptability or versatility
If multiple applications can access server content, then adaptability is improved, but security level deteriorates
Solution Approach 1:
The patent assigns different privilege levels to different applications based on their specific needs and functions. Each application receives access permissions tailored to its requirements rather than a uniform access policy. This local quality approach allows multiple applications to access server content with appropriate privileges, improving adaptability while maintaining security level through differentiated access control.
Data Source
AI summary
Provided is a method of controlling a security level of a device. The method includes: requesting a server to authenticate a device, wherein the requesting is performed by a second application installed in the device; generating a device-server session for communication between the server and the device, based on the authentication of the device by the server; requesting access to the server by using the generated device-server session, wherein the requesting is performed by a first application installed in the device; and receiving content from the server due to the first application accessing the server.