Global Identifier for Cross-Protocol User Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current communication protocols lack a standardized mechanism to reuse user information across different protocols and correlate access to resources, leading to redundant authentication and lack of session information retrieval across multiple protocol transactions.
Innovation Solution
A method that transmits user information from a client to a control entity, generates a global identifier, and uses it to register with service entities across various communication protocols, enabling the reuse of user information and session correlation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate authentication procedures are used for each protocol (SIP, HTTP, SMTP), then each protocol can maintain its own security and access control mechanisms, but the user must perform multiple authentication operations and there is no mechanism to reuse authentication information across protocols
Solution Approach 1:
The patent implements a universal authentication mechanism where a single authentication performed by a user client can be reused across multiple communication protocols (SIP, HTTP, SMTP, etc.). The authorization server stores the authentication result and provides it to different service entities, allowing the same credentials to work across multiple protocols without re-authentication, thus making the authentication system multi-functional and protocol-agnostic
Solution Approach 2:
The patent introduces an authorization server as an intermediary component between the user client and various service entities. This mediator stores authentication information and provides it to different protocols and services, enabling information exchange and correlation across multiple protocols without requiring direct integration between each protocol's authentication mechanisms
2Reliability
If protocol-specific authentication mechanisms are used, then each protocol maintains independent access control, but there is no generic mechanism to correlate user transactions and retrieve information across different protocols
Solution Approach 1:
The authorization server acts as a central intermediary that correlates user transactions across different protocols. It stores authentication results and uses unique identifiers to link user actions in SIP, HTTP, SMTP and other protocols, enabling service entities to retrieve correlated information about user sessions and transactions regardless of which protocol was used
Solution Approach 2:
The system performs preliminary authentication and stores the result in the authorization server before the user accesses multiple services. This pre-stored authentication information is then readily available for correlation and information retrieval across different protocols, eliminating the need for repeated authentication and enabling seamless session correlation
3Adaptability or versatility
If a global identifier system is implemented to enable information reuse across protocols, then authentication can be reused and sessions correlated, but the system complexity increases due to the need for centralized storage and coordination
Solution Approach 1:
The authorization server is designed as a universal component that handles multiple protocols (SIP, HTTP, SMTP, XMPP, etc.) through a common interface and data structure. By implementing a protocol-agnostic authentication and information storage mechanism, the system achieves cross-protocol versatility without requiring separate complex systems for each protocol
Solution Approach 2:
The patent implements a homogeneous data structure and interface for storing and retrieving authentication information across different protocols. By standardizing the representation of user credentials and session information in a uniform format, the system reduces complexity while maintaining adaptability to multiple protocols through consistent handling methods
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for exchanging user information between a control entity (80) of an access network accessible by a user client (100) and a service entity (90) connected to the access network, the method comprising the steps of: transmitting user information from the user client (100) to a control entity (80) of the access network in order to register with the access network, checking in the control entity (80) the user information versus a user profile stored at the control entity (80), generating a global identifier assigned to the client (100), storing the global identifier in the control entity (80), transmitting the global identifier to the service entity (90), and using the global identifier to register the client (100) with the service entity (90).