Proxy Bypass Login for Mobile App Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Social networking systems face challenges in efficiently authenticating users on mobile devices with limited capabilities, particularly when accessing software applications, which can lead to increased processing demands and reduced user experience.
Innovation Solution
Implementing a secure identifier (ID) system that allows users to authenticate once, generating a first secure ID for software application installation and a second secure ID for authorization, which is validated by the social networking system to bypass repeated login processes, utilizing an intermediate server for data processing and optimization for mobile devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional authentication methods are used on mobile devices, then security is maintained, but processing demands increase and user experience deteriorates
Solution Approach 1:
The system performs preliminary authentication by generating a secure identifier during the initial login process. This secure ID is then reused for subsequent application authorizations, eliminating the need for repeated full authentication cycles and reducing processing demands on mobile devices.
Solution Approach 2:
The patent introduces a secure identifier as an intermediary element between the user's credentials and the application authorization process. This mediator allows the system to verify user identity without requiring the actual credentials to be processed repeatedly, thus reducing computational overhead.
2Reliability
If full authentication is performed for each application access, then security is ensured, but the authentication process must be repeated frequently
Solution Approach 1:
The system performs the complex authentication process once during initial login, generating a secure identifier that encapsulates the authentication result. This preliminary action eliminates the need to repeat the full authentication sequence for subsequent application accesses.
Solution Approach 2:
Instead of reproducing the entire authentication process, the system creates a cryptographic copy (secure identifier) of the authentication result. This copy can be verified multiple times without requiring the original credentials or repeating the full authentication sequence.
3Speed
If mobile devices process authentication data locally, then authentication speed improves, but device capabilities are overwhelmed
Solution Approach 1:
The patent extracts the computationally intensive authentication processing from the mobile device and relocates it to the server infrastructure. The mobile device only needs to store and present the secure identifier, while the server handles the complex verification processes.
Solution Approach 2:
The secure identifier serves as an intermediary that simplifies the interaction between the mobile device and the authentication system. Rather than processing complex credentials locally, the device simply presents this compact identifier, which the server then validates.
Data Source
AI summary
In one embodiment, an intermediate server receives a request with a secure ID to authorize a software application, transmits the secure ID to a system, receives an access token from the system indicating that the software application has been authorized, evaluates the access token for validity, and transmits a response to the mobile device indicating the software application is authorized.