Global ID Authentication Relay for Multi-Service Login
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing ID linkage systems using protocols like Open ID Connect (OIDC) become complex and costly when multiple authentication servers are involved, leading to increased development and maintenance time.
Innovation Solution
An authentication system with a terminal device, a first server storing user identification information, a second server not storing identification information, and a platform that relays authentication requests and results between them, allowing easy configuration and user-friendly authentication methods.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple authentication servers are linked using OIDC protocol, then user authentication across services is enabled, but system complexity increases
Solution Approach 1:
The patent introduces a platform as an intermediary component that mediates between authentication servers and service servers. This platform handles the complex OIDC protocol implementation centrally, allowing authentication servers to communicate with service servers through a simplified interface without direct complex interactions, thus reducing overall system complexity while maintaining multi-service authentication capability
2Adaptability or versatility
If authentication servers are linked with multiple services, then ID linkage functionality is achieved, but development and maintenance time increases
Solution Approach 1:
The platform is designed as a universal authentication service that can serve multiple authentication servers and service servers simultaneously. By implementing multi-functionality in a single platform, the system avoids the need to develop and maintain separate authentication linkage mechanisms for each service combination, thereby reducing development and maintenance time while achieving comprehensive ID linkage
3Reliability
If servers exchange information directly, then authentication can be performed, but system configuration becomes complex
Solution Approach 1:
The platform serves as a centralized intermediary that manages information exchange between authentication servers and service servers. Instead of requiring direct configuration and communication between multiple servers, the platform handles authentication information relay through a single point of contact, significantly simplifying system configuration while maintaining reliable authentication functionality
Data Source
AI summary
An authentication system includes service providing systems, a global ID platform, and a terminal device owned by a user. The first service providing system includes a first authentication server and a first back-end server. The first back-end server provides a first service. The second service providing system includes a second authentication server and a second back-end server. The second back-end server provides a third service. The user is a member of the first service and has a user ID of the first service. When the user requests global login to the third service, the global ID platform relays the request from the second authentication server to the first authentication server and relays an authentication result, returned by the first authentication server for the request, from the first authentication server to the second authentication server.