Messaging Session Authentication via Local Token Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing messaging systems lack effective authentication mechanisms to ensure the identity of users communicating through sessions, particularly when sensitive information is exchanged, and current solutions may compromise security by exposing verification information or authentication tokens to intermediary systems.
Innovation Solution
A system where a user device receives an authentication request, accesses an authentication token from an authentication computer system, and sends an encrypted indication of the token to a messaging computer system, which verifies the user's identity without exposing verification information or authentication tokens to intermediary systems, ensuring secure communication within a messaging session.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication information is transmitted through intermediary messaging systems, then user identity can be verified in communication sessions, but security is compromised by exposure of verification information to intermediary systems
Solution Approach 1:
The patent extracts the authentication token from the messaging system entirely. The token is generated by the authentication system and stored locally in the client application, never being transmitted through or stored on intermediary messaging servers. This eliminates the security exposure to intermediaries while maintaining authentication reliability through direct verification between authentication system and messaging system.
Solution Approach 2:
The patent introduces a new intermediary - the authentication system - that mediates between the user and the messaging system. This authentication system generates and manages tokens securely, acting as a trusted mediator that prevents direct exposure of authentication credentials to the messaging intermediary, thus resolving the contradiction between verification reliability and security exposure.
2Object-affected harmful factors
If authentication tokens are stored locally in client applications, then security is improved by preventing exposure to intermediary systems, but device complexity increases due to additional authentication management components
Solution Approach 1:
The patent segments the authentication functionality into distinct components: token generation by the authentication system, token storage in the client application, and token verification by the messaging system. This segmentation allows each component to be optimized independently, reducing overall complexity while maintaining security through distributed responsibility.
Solution Approach 2:
The client application performs self-service by locally storing and managing authentication tokens without requiring continuous interaction with intermediary systems. The token is automatically generated during authentication and retained locally for session use, eliminating the need for complex intermediary-based token management while improving security.
3Ease of operation
If multiple programs on a user device access authentication tokens, then ease of operation is improved, but security risks increase from potential token leakage
Solution Approach 1:
The patent applies local quality by allowing different programs on the user device to access authentication tokens based on their specific needs and security clearances. Each program can access the token locally stored on the device without transmitting it externally, providing differentiated access control that maintains security while enabling operational flexibility across multiple applications.
Data Source
AI summary
Techniques disclosed herein relate to the authentication of a first user in a communication session between the first user using a user device and a second user using a remote computer system. The computer system sends an authentication request in the session, and the user device receives the authentication request in the session via a messaging program. The user device then causes a different program to access an authentication token received from an authentication computer system. The user device sends an indication of the authentication token to the remote computer system which the remote computer system verifies to authenticate the first user within the session.