Parent Domain Authentication for Cross-Website Login
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users are required to re-enter their login information when accessing related websites, even if the information is the same, due to the lack of seamless authentication across different domain versions, such as from a non-mobile to a mobile version of a website.
Innovation Solution
A system that identifies the parent domain name from an absolute domain name and determines if stored authentication information is available for that parent domain, allowing for automatic population of login fields in related websites by prompting the user for authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the web browser saves login information for a specific hostname, then the login information can be automatically populated for that specific website, but the login information cannot be reused for related websites with different hostnames (e.g., mobile version)
Solution Approach 1:
The patent segments the domain name into two parts: the hostname (e.g., 'www' or 'mobile') and the parent domain (e.g., 'myemail.cxm'). By separating these components, the system can store authentication information at the parent domain level while allowing different hostnames to share the same credentials, thus enabling automatic login across related websites.
Solution Approach 2:
The patent introduces a notification mechanism as an intermediary between the stored authentication information and the login form. When a user accesses a website, the system checks for matching parent domain credentials, and if found, displays a notification asking the user if they want to use the stored credentials. This intermediary step enables cross-hostname authentication while maintaining user control.
2Ease of operation
If the web browser automatically populates login information without prompting the user, then user convenience is improved, but security is compromised due to lack of explicit user permission
Solution Approach 1:
The patent performs preliminary checking of authentication information availability before the user attempts to log in. The system proactively identifies matching parent domain credentials and prepares a notification in advance, so that when the user reaches the login screen, the option to use stored credentials is already presented, combining convenience with security.
Solution Approach 2:
The patent implements a feedback loop where the system monitors website access attempts, checks for matching authentication information, and provides feedback to the user through a notification. This feedback mechanism allows users to explicitly authorize the use of stored credentials, maintaining security while enabling automatic login functionality.
Data Source
AI summary
Methods for or providing stored authentication information of one website for a related website are provided. In one aspect, a method includes receiving a first request to provide, for display, a webpage includes at least one authentication field, and receiving an identification of an absolute domain name for the webpage. The method also includes identifying a parent domain name from the absolute domain name, and determining whether stored authentication information for a user is available for the parent domain name. The method further includes providing, for display, a first notification to populate the stored authentication information for the user in the at least one authentication field when the stored authentication information is available for the parent domain name. Systems and machine-readable media are also provided.