Proxy Application Local Authentication for Web Browsers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional information processing apparatuses face security concerns by transmitting and receiving authentication information, such as usernames and passwords, over networks, which is undesirable for enhanced security and results in unwanted network traffic.
Innovation Solution
An information processing apparatus that acquires an operation screen for authentication from a Web server, displays it to the user, and performs authentication processing without transmitting the authentication information to the Web server, using a proxy application to monitor and manage data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication information is transmitted between Web server and information processing apparatus, then authentication processing can be performed, but security is compromised and unwanted network traffic is generated
Solution Approach 1:
The patent extracts authentication information from the network transmission path. Instead of transmitting authentication information between the Web server and information processing apparatus, the Web application only transmits the authentication screen and receives authentication results. The actual authentication information remains localized within the information processing apparatus, eliminating it from the network traffic while preserving authentication functionality.
Solution Approach 2:
The patent introduces a proxy application as an intermediary component within the information processing apparatus. This proxy application acts as a local authentication server that mediates between the Web browser and the authentication process. The proxy application receives authentication information locally, performs verification, and communicates only authentication status (success/failure) to the Web application, thereby preventing sensitive authentication data from traversing the network.
2Reliability
If authentication information is transmitted over network, then authentication processing can be performed, but confidential information is exposed
Solution Approach 1:
The patent removes authentication information from the network communication path. The Web application transmits only the authentication screen interface and receives only authentication result status. The actual authentication information (usernames, passwords, card data) is processed entirely within the information processing apparatus and never transmitted over the network, thereby eliminating information exposure risks while maintaining authentication functionality.
Solution Approach 2:
The proxy application serves as a secure intermediary that handles authentication information locally. It receives authentication inputs from the Web browser, performs verification against stored credentials, and communicates only binary authentication results to the Web application. This intermediary architecture ensures that sensitive authentication data remains confined to the local system and is never exposed to network transmission or external servers.
Data Source
AI summary
An information processing apparatus acquires, from a Web server, an operation screen for inputting authentication information, displays the acquired operation screen, and accepts authentication information input by a user. The apparatus then executes authentication processing using the accepted authentication information without transmitting the authentication information to the Web server, and authorizes, when the authentication succeeds, the user to use a function of itself.