Proxy Login Module for Enterprise Account Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional authentication systems for managing enterprise data require multiple accounts and authentication information for authorized personnel and specialists, leading to increased complexity and resource management burdens, particularly in joint management scenarios like financial accounting and tax practices.
Innovation Solution
An authentication device and computer-readable medium that implement a first login module for authenticating a primary account and a second login module for approving access to a dependent account with a pre-established proxy, allowing specialist users to access enterprise user accounts without needing separate authentication for the dependent account.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate accounts are issued for authorized persons and specialists, then data access control is improved, but account management complexity increases
Solution Approach 1:
The system segments authentication into two distinct modules: a first login module for authorized persons and a second login module for specialists. This segmentation allows each module to handle specific authentication scenarios independently, maintaining security while simplifying the overall management structure.
Solution Approach 2:
The patent introduces a proxy authentication mechanism as an intermediary. The second login module acts as a mediator that validates specialist access requests by referencing pre-established proxy relationships with authorized persons, eliminating the need for specialists to have independent authentication credentials.
2Reliability
If multiple accounts with separate authentication are required, then access security is improved, but resource management burden increases
Solution Approach 1:
The authentication device is designed with multi-functionality, where the first login module and second login module work together in a unified system. The second login module leverages the authentication framework established by the first login module, allowing specialists to access data without requiring separate account management while maintaining security through proxy validation.
Solution Approach 2:
The system performs preliminary authentication through the first login module for authorized persons. This preliminary action establishes a trusted session that can then be referenced by the second login module when specialists need access, eliminating the need for specialists to undergo separate full authentication processes.
3Reliability
If specialists require independent account access, then individual accountability is improved, but ease of operation deteriorates
Solution Approach 1:
The system segments the authentication process into two paths: one for authorized persons who need full accountability, and another for specialists who need convenient access. The first login module handles authorized persons with complete authentication, while the second login module provides streamlined access for specialists through proxy validation, optimizing both accountability and ease of operation for different user types.
Data Source
AI summary
An authentication device includes a first login module and a second login module. Upon a login request to a first account among predetermined accounts which is accompanied by an entry of authentication information from a user, the first login module compares the entered authentication information with the authentication information associated with each of the predetermined accounts and approves the login request if the entered authentication information matches the authentication information on the first account. The second login module approves login of a second account if login to the second account is requested in a login session started by approval of the login request to the first account by the first login module. The second account has a pre-established proxy to approve the login request to the first account.