Dual Session Authentication for Web Service Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing web service systems allow users to access services without agreeing to terms of service if they directly specify a URL while the agreement screen is displayed, potentially bypassing the necessary agreement process.
Innovation Solution
An information processing server system generates a second authentication session based on a first authentication session after user authentication, transmits this second session to the client, and only provides access to the web service once agreement to the terms of service is confirmed through the second session.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the cookie of the authentication session is supplied to a web browser, then the user can access the web service after login, but the user may access and use the web service without agreeing to the terms of service by directly specifying a URL
Solution Approach 1:
The patent divides the authentication session into two separate cookies: a first cookie for authentication and a second cookie for terms of service agreement. This segmentation prevents the user from bypassing the agreement process by directly accessing the service URL, as both cookies are now required for full service access.
Solution Approach 2:
The patent introduces a second authentication session as an intermediary mechanism between user login and service access. This second session specifically handles terms of service agreement verification, acting as a mediator that ensures compliance before granting full service access.
2Device complexity
If a single authentication session is used for both login and terms of service agreement, then the system is simpler, but the user can bypass the agreement process by directly accessing service URLs
Solution Approach 1:
The patent segments the single authentication session into two distinct sessions (first and second cookies), each with specific purposes. This segmentation increases system structure complexity but ensures reliable enforcement of terms of service agreement by separating authentication from agreement verification.
Solution Approach 2:
The patent assigns different functional qualities to different parts of the authentication system: the first cookie handles authentication locally, while the second cookie handles terms of service agreement locally. This local quality differentiation ensures that each aspect is properly enforced without interference.
3Reliability
If the system requires agreement to terms of service before service access, then compliance is ensured, but the user experience becomes more complex with additional agreement screens
Solution Approach 1:
The patent implements preliminary action by requiring users to agree to terms of service before accessing the web service. The second authentication session is established in advance during the agreement process, ensuring compliance is secured before the user can utilize the service functionality.
Solution Approach 2:
The second authentication session acts as an intermediary that manages the agreement process. It mediates between the user's login action and the service access, ensuring that terms of service agreement is properly handled as a separate but integrated step.
Data Source
AI summary
An information processing server system in which agreement to terms of service by a user is confirmed using a second authentication session different from a first authentication session used when a client uses the web service is provided.