Device Access Token Exchange for Secure Multi-App Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face security vulnerabilities and inefficiencies in server-to-device data exchange due to multiple authentication protocols for various applications, leading to issues like code injection, user impersonation, and excessive network traffic.
Innovation Solution
Implementing a unified device access token system that enables secure, direct data exchange between smart devices and service providers, bypassing intermediate systems, and managing authenticated sessions on-demand to minimize processing overhead and network bandwidth.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple authentication protocols are implemented for various applications, then application versatility is improved, but system complexity and security vulnerabilities increase
Solution Approach 1:
The patent implements a universal authentication protocol that serves multiple applications and purposes. A single protocol handles device authentication, user verification, and data exchange across different applications, eliminating the need for separate authentication mechanisms for each application while maintaining versatility.
Solution Approach 2:
The patent merges multiple authentication functions into a unified protocol. Device identification, user credentials verification, and session management are combined into a single integrated authentication flow, reducing system complexity while maintaining the ability to support diverse applications.
2Ease of operation
If credentials are stored by applications, then ease of operation is improved, but security is worsened due to potential compromise
Solution Approach 1:
The patent extracts credential storage from applications and places it in a secure element within the device. Applications no longer store sensitive credentials locally,而是 rely on the secure element for credential management, maintaining ease of operation while significantly improving security.
Solution Approach 2:
The patent introduces a secure element as an intermediary between applications and credential storage. The secure element acts as a trusted mediator that applications can interact with without exposing credentials, enabling easy application operation while protecting security.
3Loss of energy
If direct server-to-device data exchange is implemented, then network efficiency is improved, but device complexity increases
Solution Approach 1:
The patent performs preliminary authentication and device identification before data exchange occurs. The device presents its identity and credentials in advance, establishing a secure session that enables efficient direct communication without requiring complex real-time authentication mechanisms during data transfer.
Solution Approach 2:
The patent enables the device to autonomously manage its own authentication and session establishment with the server. The device independently handles credential verification and secure connection setup, reducing the need for complex intermediary systems while improving network efficiency.
Data Source
AI summary
Various embodiments described herein relate to systems and methods to perform server-to-device secure data exchange using a device access token. In an embodiment, a first device may, via a software application, receive a request to enroll a paired second device in a secure ecosystem, generate a device access token based on a device identifier for the second device, and provide the token to the second device. The second device may receive a transaction request from a second application and transmit the device access token and transaction request to a computing system. The computing system may parse a device identifier from the token, generate an electronic message responsive to the transaction request, and send the electronic message to the second device. The second device can provide a response to the transaction request to the second application based on the received electronic message.