Embedded Webview Authentication for Secure Third-Party Data Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securely communicating data between an application associated with an entity and a third-party system expose user login credentials to potential compromise by malicious actors, leading to unauthorized access and diversion of funds.
Innovation Solution
Implementing a software development kit (SDK) within the application to facilitate direct communication with third-party systems, providing a native login page webview and using embedded authentication to eliminate the need for intermediary services, thereby securing user credentials and reducing access points for malicious actors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an intermediary service is used to establish communication between the payroll provider and the application, then the login credentials are exposed to potential compromise by malicious actors, but the communication process becomes more complex and vulnerable to attacks
Solution Approach 1:
The patent extracts and removes the intermediary service from the communication architecture. Instead of using a third-party intermediary to establish communication between the payroll provider and the application, the system enables direct communication between these components. This elimination of the intermediary service removes the vulnerability point where login credentials were exposed, while simplifying the overall communication process.
Solution Approach 2:
The patent introduces a secure authentication mechanism that acts as a trusted mediator during the login process. Rather than exposing credentials to an intermediary service, the system uses embedded authentication within the payroll provider's login page that verifies credentials securely without requiring the application to handle or store them. This mediator ensures secure communication without creating vulnerability points.
2Ease of operation
If login credentials are provided to an intermediary service for establishing communication sessions, then the credentials can be used to access the payroll provider, but the credentials become vulnerable to theft and unauthorized access
Solution Approach 1:
The system implements self-service authentication where the application directly interacts with the payroll provider's authentication mechanism without requiring credential sharing. The embedded authentication system allows the application to initiate and complete the login process autonomously, with credentials never leaving the payroll provider's secure environment. This eliminates the need to provide credentials to any external service while maintaining ease of operation.
Solution Approach 2:
The patent extracts the credential handling process from the communication establishment process. Instead of providing credentials to an intermediary to establish communication, the system separates these functions: the application directly initiates communication with the payroll provider, and authentication is handled through embedded security mechanisms within the payroll provider's interface, removing credentials from the exchange entirely.
3Adaptability or versatility
If an intermediary service is used to manage communication between the application and payroll provider, then the system can establish communication sessions, but the attack surface is increased providing more access points for malicious actors
Solution Approach 1:
The patent removes the intermediary service component from the system architecture, thereby eliminating the additional access points it created. Direct communication between the application and payroll provider is established through secure, embedded authentication mechanisms, reducing the attack surface while maintaining the ability to establish communication sessions.
Solution Approach 2:
The system merges the authentication and communication establishment processes into a single integrated flow. The embedded authentication mechanism within the payroll provider's login page allows the application to both authenticate and establish communication in one seamless process, eliminating the need for separate intermediary services and reducing the number of vulnerable access points.
Data Source
AI summary
A webview associated with a third-party system is provided in an application context associated with an entity. It is determined that a user has been authenticated by the third-party system based on data comprising a page displayed via the provided webview. In response to a determination that the user has been authenticated by the third-party system, one or more tasks to perform a function with the third-party system on behalf of the entity are automated.