Device Access Token Enrollment for Secure App-to-Account Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face security vulnerabilities due to multiple authentication protocols for various applications on smart devices, leading to issues like code injection, user impersonation, and data interception, while also requiring redundant authentication and increased network traffic for data requests.
Innovation Solution
Implementing a unified device access token system that enables secure server-to-device data exchange by authenticating smart devices and applications using a single protocol, allowing direct data provisioning without intermediaries and minimizing authentication overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple authentication protocols are implemented for various applications on smart devices, then application compatibility and access control are improved, but security vulnerabilities increase and processing overhead increases
Solution Approach 1:
The patent implements a universal device access token that serves multiple authentication purposes across different applications and services. Instead of implementing separate authentication protocols for each application, the system uses a single device access token that can be universally recognized and validated by the service provider's authentication manager, thereby maintaining application compatibility while reducing security vulnerabilities associated with multiple protocols
Solution Approach 2:
The patent combines multiple authentication functions into a single device access token mechanism. The token integrates device identification, application authorization, and service access control into one unified credential that replaces the need for separate authentication protocols, thereby reducing processing overhead and security risks while maintaining versatile access control
2Adaptability or versatility
If multiple authentication protocols are implemented for various applications on smart devices, then application compatibility is improved, but processing overhead and network traffic increase
Solution Approach 1:
The device access token serves as a universal credential that handles authentication across multiple applications and services without requiring separate authentication protocols. The service provider's authentication manager can validate the same token for different applications, thereby reducing the processing overhead associated with implementing and managing multiple authentication protocols while maintaining application compatibility
3Ease of operation
If credentials are stored by third-party applications, then application functionality is improved, but account security is compromised
Solution Approach 1:
The patent introduces the service provider's authentication manager as an intermediary between the smart device and third-party applications. Instead of applications directly storing and managing credentials, the authentication manager acts as a secure intermediary that validates the device access token and manages authentication, thereby enabling application functionality while improving account security by removing credentials from application storage
Data Source
AI summary
Systems and methods for server-to-device secure data exchange are disclosed. A system generates a device access token for a smart device based on a device identifier, a financial account identifier, a user identifier, and a software application identifier for a first service provider. The token is stored in secure storage on the smart device. When a transaction request is received from the software application, the system accesses the stored token. The device access token is validated for the software application and transmitted with the transaction request to a computing system associated with the financial account. The computing system verifies the transaction request by parsing the software application identifier within the token, responds with an electronic message, and a response to the transaction request is provided to the software application based on the message.