Network Intermediary Credential Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices often retain old user credentials in their cache, leading to unauthorized access when switched to new users, as the content server cannot distinguish between legitimate and illegitimate user IDs and passwords.
Innovation Solution
A method and system where a network intermediary modifies client requests by adding a reliable user identifier associated with the device identifier, and the content server verifies the combination against a dataset of known identifiers, prompting the user for a new password if the combination is not recognized.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the device caches user ID and password for automatic authentication, then ease of operation is improved, but security deteriorates because old credentials may be used after device transfer
Solution Approach 1:
The patent introduces a content server as an intermediary between the client device and the content delivery system. This intermediary validates the combination of device ID and user ID before granting access, acting as a mediator that verifies credentials without requiring direct user intervention. The content server checks whether the user ID is currently associated with the device ID in a dataset, thereby preventing unauthorized access from device transfers while maintaining automatic authentication functionality.
2Productivity
If the content server accepts cached credentials without verification, then productivity is improved through fast access, but security deteriorates due to unauthorized access
Solution Approach 1:
The patent implements preliminary verification of credentials before content delivery. The content server performs a validation check in the dataset to determine whether the user ID is currently associated with the device ID before granting access. This preliminary action ensures that only authorized users can access content, while the verification process occurs in the background without significantly impacting user productivity or access speed.
3Ease of operation
If the device sends cached user ID and password automatically, then ease of operation is improved, but measurement precision deteriorates because the server cannot distinguish legitimate from illegitimate credentials
Solution Approach 1:
The patent implements a feedback mechanism where the content server validates the user ID against the device ID and provides feedback by either granting or denying access. The server checks the dataset to determine if the user ID is currently associated with the device ID, and this validation feedback ensures that only legitimate credentials are accepted. This feedback loop maintains automatic credential submission while improving verification accuracy through server-side validation.
Data Source
AI summary
The present invention provides a method and system for verifying network credentials. To accomplish the invention, a network intermediary, located in a communication path between a client device and a content server, receives from the client device a request for content directed to the content server, wherein the request includes a device identifier and a password. The network intermediary responsively looks up a user identifier associated with the device identifier, modifies the request to include the user identifier, and then sends the modified request along to the content server. The content server receives the request and determines whether a combination of the device identifier and the user identifier exists within a dataset of known combinations. If it exists, the content server may validate the request by reference to the password. If not, the content server adds the combination to the dataset and requests a new password from the user.