Remote Client Credential Caching for Off-Network Ledger Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Users are often required to authenticate via a network to access resources, which is not feasible when no network connection is available or desired.

Innovation Solution

A system that uses a remote client with a distributed ledger stored locally on the client device, allowing off-network access by capturing transaction information, determining device identifiers, retrieving credentials, unlocking ledger access, and terminating sessions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If network authentication is required to access resources, then security is improved, but accessibility without network connection deteriorates

Engineering Contradiction:
ImprovesecurityVSAvoidaccessibility without network connection
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs authentication credentials verification in advance by establishing a network session to retrieve and validate credentials before the user needs access. The validated credentials are then cached locally on the client device, enabling subsequent off-network access without requiring real-time network connectivity for authentication.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system introduces a credential caching mechanism as an intermediary between the authentication server and the resource access system. This intermediary stores validated credentials locally on the client device, allowing the user to access resources offline while maintaining security through pre-validated credentials.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If network session is established for authentication, then authorization is ensured, but network dependency increases

Engineering Contradiction:
ImproveauthorizationVSAvoidnetwork dependency
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system performs authorization validation in advance during the network session establishment phase. Authentication credentials are verified and authorized status is determined before the user needs to access resources. This preliminary authorization check enables the system to grant offline access to authorized users without requiring continuous network connectivity.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system extracts the authorization decision from the online authentication process and stores it locally as cached credentials. By separating the authorization verification from real-time network dependency, the system allows users to access authorized resources offline while maintaining security through pre-validated credentials.

Inventive Principle:
Principle #2Taking out (Extraction)

3Ease of operation

If distributed ledger credential is cached locally, then off-network access is enabled, but credential security management becomes complex

Engineering Contradiction:
Improveoff-network accessVSAvoidcredential security management
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The system implements automatic credential caching and management on the client device. The credential caching mechanism automatically retrieves, validates, stores, and manages authentication credentials without requiring manual user intervention. The system handles credential expiration, renewal, and security management autonomously, reducing the complexity burden on users while enabling seamless off-network access.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS20250294023A1System for off-network access to resources using a remote client
Publication Date: 2025.09.18 BANK OF AMERICA CORP
  • US20250294023A1 patent drawing
  • US20250294023A1 patent drawing
  • US20250294023A1 patent drawing

AI summary

Systems, computer program products, and methods are described herein for off-network access to resources using a remote client. The present invention is configured to receive, from one or more client devices, an off-network resource access request from a user; establish one or more network sessions with the one or more client devices; determine, via the one or more network sessions, one or more device identifiers associated with the one or more client devices; retrieve, from an internal repository, a distributed ledger credential associated with the distributed ledger stored on the one or more client devices; unlock, via the one or more network sessions, access to the distributed ledger for the user via the one or more client devices using the distributed ledger credential; and terminate the one or more network sessions in response to unlocking access to the distributed ledger for the user.