Session Authentication via Request-Specific Key Integration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for authenticating users in communication networks, such as the Internet, require high user interaction and prior registration with a service, and digital certificates for device authentication are not sufficient for service access.
Innovation Solution
A method where a communication terminal initiates a session with a service server, generating and transmitting a request-specific key automatically, which is integrated into an access request, allowing for secure and seamless authentication without user interaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods (username/password or digital certificates) are used, then service security is maintained, but user interaction complexity and registration requirements increase
Solution Approach 1:
The service provider pre-generates authentication credentials (user names and passwords) and stores them in a credential repository before the user needs them. When a user requests access, the system automatically retrieves and provides the pre-prepared credentials, eliminating the need for users to manually create or manage authentication data.
Solution Approach 2:
The system automatically generates and manages authentication credentials without requiring user intervention. The credential generation, storage, retrieval, and rotation processes are fully automated, with the system serving itself to maintain security credentials, thereby reducing user interaction to minimal actions.
2Reliability
If digital certificates are used for device authentication, then device-level security is improved, but service-level authentication still requires additional user interaction
Solution Approach 1:
The system merges device authentication and service authentication into a single unified process. By integrating the credential repository with both device identification and service access control, the system provides combined authentication that simultaneously verifies device identity and service entitlement, eliminating the need for separate authentication steps.
Solution Approach 2:
The authentication system is designed to serve multiple functions: it provides device authentication, service authentication, and automated credential management all through a single integrated mechanism. The same infrastructure that authenticates devices also automatically handles service-level authentication, making the system multi-functional and highly automated.
3Ease of operation
If manual credential management is implemented, then authentication control is maintained, but time consumption and user burden increase
Solution Approach 1:
The system implements automated feedback loops where the credential repository continuously monitors authentication requests, automatically retrieves appropriate credentials, validates them against service requirements, and updates credential states. This closed-loop feedback system eliminates manual intervention while maintaining precise control over the authentication process.
Solution Approach 2:
Credentials are pre-generated and stored in the credential repository before any authentication event occurs. When authentication is needed, the system simply retrieves the pre-prepared credentials instantly, eliminating the time-consuming processes of manual credential creation, verification, and management.
Data Source
Figure 1
AI summary
The present invention relates to a method of authenticating a user of a communication terminal (1), on which at least one application (3) is installed, at a service (4) on a service server (2). The method is characterized in that an initiation request, which contains an address identifier of the communication terminal (1), is generated by the application (3) for initiating a session and is transmitted to the service server (2), the service server (2) after receipt of the initiation request automatically generates and transmits a request specific key (OTP) to the communication terminal (1) and the application (3) subsequently generates an access request in the session, wherein the application (3) integrates the received request specific key (OTP) automatically in the access request, and the access request is automatically transmitted from the communication terminal (1) to the service server (2) in the session. Furthermore a respective application (3) and a respective system are described.