Mobile SSO Integration via Authorization Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Single Sign-On (SSO) solutions inadequately support mobile devices for accessing third-party web services, leading to inefficient and insecure authentication processes, requiring manual account creation and synchronization, which negates the benefits of SSO and poses security risks.
Innovation Solution
Integration of client-side SSO authentication infrastructure with a mobile authorization protocol, using authentication tokens to provide seamless, secure access to third-party services, supporting various encryption mechanisms and minimizing client customization, allowing access through both native applications and web browsers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If current SSO solutions are used for mobile devices, then web-based services can be accessed, but manual account creation and synchronization is required which negates SSO benefits
Solution Approach 1:
The patent introduces a mobile authorization server as an intermediary between the mobile device and third-party service providers. This server handles authentication tokens and authorization codes, enabling automatic SSO authentication without manual account creation. The authorization server mediates the communication between the client system's SSO infrastructure and mobile devices, translating web-based SSO protocols into mobile-compatible authentication flows.
Solution Approach 2:
The system performs preliminary authentication actions by obtaining authorization codes and access tokens before the mobile device needs to access third-party services. The authorization server pre-establishes trusted relationships with service providers through client credentials, so that when a mobile user needs access, the authentication is already prepared and can be completed automatically without manual intervention.
2Adaptability or versatility
If current SSO solutions are used for mobile devices, then access to third-party services is enabled, but security risks arise from account synchronization delays
Solution Approach 1:
The patent extracts the authentication token management functionality from the mobile device itself and places it on the server side (authorization server). By taking out the sensitive authentication logic and token storage from the mobile device, the system eliminates security risks associated with device loss, theft, or local storage vulnerabilities. The authorization server centrally manages all authentication credentials, ensuring that revoked access rights are immediately propagated without synchronization delays.
Solution Approach 2:
The authorization server implements real-time feedback mechanisms where changes to user credentials, access rights, or revocation status are immediately reflected in the authentication tokens. The system continuously monitors and updates authorization states, ensuring that the mobile device always has current authentication information without relying on periodic synchronizations that create security gaps.
3Adaptability or versatility
If manual account creation is required for each service, then service access is granted, but the benefits of SSO framework are negated
Solution Approach 1:
The authorization server implements a universal authentication mechanism that works across multiple third-party service providers through a single interface. Instead of requiring separate account management for each service, the system uses a unified OAuth 2.0-based authorization framework that can authenticate to any service provider that supports standard OAuth flows. This multi-functional approach allows a single mobile application to access diverse services without manual account creation for each one.
Data Source
Figure 1A
Figure 1B
Figure 2
AI summary
Improved methods and systems for integrating client-side single sign-on (SSO) authentication security infrastructure with a mobile authorization protocol are disclosed that provide clients with secured SSO mobile access to third-party services. Embodiments of the present invention leverage SSO authentication protocols that are utilized at many client-side systems already and integrate these SSO authentication protocols with a mobile SSO authorization protocol, thereby effectively extending the SSO framework to mobile service requests of web services at third-party service provider systems. Embodiments of the present invention provide a secure and automated solution which may be implemented in any existing client-side SSO frameworks with minimum cost and time, while providing a lightweight and secure solution that provides users using either native applications or mobile web application to access third-party web services.