Portal Authenticator Shell for Single Sign-On App Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The proliferation of mobile applications and limited inter-application communication capabilities lead to increased security risks and cumbersome authentication processes, including repetitive password usage.

Innovation Solution

A shell application on a mobile device that stores user preferences and authentication data, enabling seamless communication and authentication with multiple applications, allowing direct interaction through an invisible interface.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If users authenticate into multiple applications separately, then each application can be securely accessed, but the authentication process becomes time-consuming and users may reuse passwords across applications

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements a universal authentication system where a single set of credentials (username and password) can authenticate the user across multiple applications. The authentication server provides multi-functional authentication services to different applications, eliminating the need for separate authentication in each application while maintaining security through centralized credential verification.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent merges multiple authentication processes into a single unified authentication event. Instead of requiring separate authentication for each application, the system combines authentication across multiple applications, allowing a user to authenticate once and gain access to multiple applications through the portal application framework.

Inventive Principle:
Principle #5Merging (Combining)

2Reliability

If inter-application communication is limited to basic linking, then application security is maintained, but communication capabilities between applications remain primitive and insufficient

Engineering Contradiction:
Improveapplication securityVSAvoidinter-application communication capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces a portal application as an intermediary layer between applications. This mediator provides enhanced communication capabilities by allowing applications to interact through the portal framework, which manages authentication, data exchange, and communication protocols. The intermediary enables richer communication than direct linking while maintaining security through controlled access mechanisms.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of operation

If a shell application stores user preferences and authentication data, then access to multiple applications is streamlined, but the amount of data stored on the mobile device increases

Engineering Contradiction:
Improveapplication access convenienceVSAvoiddata storage volume
Core Design Contradiction:
Ease of operationVSQuantity of substance

Solution Approach 1:

The patent extracts and stores only essential authentication data (username and password) in the shell application on the mobile device, while keeping the bulk of user preferences and application data on remote servers. This extraction approach minimizes local storage requirements while maintaining ease of operation, as the shell application uses the stored credentials to automatically authenticate and access multiple applications without requiring extensive local data storage.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS12613944B2Portal application as authenticator
Publication Date: 2026.04.28 BANK OF AMERICA CORP
  • US12613944B2 patent drawing
  • US12613944B2 patent drawing
  • US12613944B2 patent drawing

AI summary

Systems and methods for authentication may be provided. Systems may include a shell application. The shell application may operate on a mobile device. The shell application may use an authentication protocol to authenticate a user. The shell application may display, to the authenticated user, a plurality of mobile application icons. The shell application may receive a user indication of a desired mobile application. The shell application may port the user from the shell application into the selected mobile application. The shell application may launch and stream the selected mobile application from a cloud location into the shell application. The shell application may enable the user to directly interact with the selected mobile application without the need for further authentication or downloading.