IDaaS Authentication Using Peer Certifiers Without Network Data Exposure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods for accessing SaaS applications through IDAAS servers are cumbersome, time-consuming, and compromise computer network security by transferring sensitive data.
Innovation Solution
A method where user authentication is validated by another user (certifier) within the same network, using the IDAAS server, without transferring network structure data, based on user usage data and confidence/availability scores.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sensitive network structure data is transferred to the IDAAS server for authentication, then authentication can be performed, but computer network security is compromised
Solution Approach 1:
The patent extracts and removes sensitive network structure data from the authentication process. Instead of transferring complete network topology and user hierarchy information to the IDAAS server, only essential authentication credentials are transmitted. The network administrator device acts as an intermediary that validates authentication requests without exposing internal network data, thereby maintaining authentication reliability while eliminating security risks.
Solution Approach 2:
The network administrator device serves as a trusted intermediary between the user and the IDAAS server. It receives authentication requests, validates them against local network credentials, and communicates only authentication outcomes to the IDAAS server. This intermediary layer prevents direct exposure of sensitive network structure data while ensuring reliable authentication through local verification.
2Reliability
If network structure data is transferred to the IDAAS server, then user authentication can be validated, but the solution becomes cumbersome and time-consuming to manage
Solution Approach 1:
The network administrator device performs self-service by maintaining local copies of network authentication credentials and independently validating user authentication requests. This eliminates the need for continuous manual updates of network structure data on the IDAAS server, as the administrator device autonomously handles validation using its local cached credentials, significantly reducing management time while maintaining authentication reliability.
Solution Approach 2:
The network administrator device pre-configures and caches network authentication credentials locally before they are needed for validation. By performing preliminary setup and maintaining local copies of authentication data, the system avoids time-consuming real-time synchronization with the IDAAS server, enabling rapid local validation while ensuring authentication accuracy.
3Measurement precision
If network structure data is continuously updated on the IDAAS server, then authentication accuracy is maintained, but the complexity of data management increases
Solution Approach 1:
The authentication validation function is segmented between the network administrator device and the IDAAS server. The administrator device handles local credential verification and maintains accurate network authentication data independently, while the IDAAS server handles cloud-based authentication services. This segmentation allows each system to maintain its own data locally, eliminating the need for complex continuous synchronization while preserving authentication accuracy through distributed validation.
Data Source
AI summary
The invention relates to a method of authenticating, with an identity-as-a-service (IDAAS) server, a user of a plurality of users of a computer network. The method includes providing identification data for the user in an authentication web page of the IDAAS server, and validating an authentication request by verifying the identification data. The verifying is performed by another user, called a certifier, that is selected from the plurality of users of the computer network known to the IDAAS server and using the IDAAS server. The invention also relates to a computer program and an IDAAS server implementing such a method.