User Device Security Manager for Web Service Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication mechanisms for users and applications accessing web services are vulnerable to credential exposure and lack control over resource access, leading to security risks and inefficiencies in managing authentication updates across third-party applications and web services.
Innovation Solution
Implementing a user device security manager that separates user authentication and authorization from the application, using mobile single-sign-on (SSO) to establish a trust relationship with web services, allowing only authorized access to resources and facilitating secure token management and consent mechanisms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If user authentication and authorization are integrated within applications, then applications can directly access web services, but security credentials are exposed and control over resource access is lost
Solution Approach 1:
The patent extracts authentication and authorization functions from applications and places them in a dedicated security manager component on the user device. This separation prevents credential exposure in applications while maintaining web service access capabilities.
Solution Approach 2:
The security manager acts as an intermediary between applications and web services. It handles authentication credentials and authorization tokens, allowing applications to access web services without directly exposing security credentials.
2Productivity
If authentication credentials are stored in applications, then applications can authenticate users, but credentials are vulnerable to exposure and unauthorized access
Solution Approach 1:
The patent extracts credential storage and management from applications to a dedicated security manager. This maintains authentication efficiency while eliminating the security vulnerability of storing credentials in applications.
Solution Approach 2:
The system segments authentication functionality into separate components: the security manager handles credential storage and management, while applications handle user interaction and web service communication. This segmentation isolates credentials from potential exposure risks.
3Adaptability or versatility
If web services require separate authentication for each application, then each application can be individually authorized, but authentication updates require widespread application redistribution
Solution Approach 1:
The security manager provides universal authentication and authorization functionality that serves multiple applications. When authentication methods need updating, changes are made centrally in the security manager rather than requiring updates to each individual application.
Solution Approach 2:
The patent merges authentication and authorization management into a single security manager component that handles multiple applications. This consolidation allows centralized management of authentication updates across all applications without requiring separate updates for each.
Data Source
AI summary
Techniques for authentication and authorization of a user, an application, or a user device for access to web resources are described. For example, a machine identifies an access request to access a remote resource associated with a web service. The access request may be received from an application executing at a user device. The machine retrieves at least one user artifact from a security manager identifier received from the web service. The machine performs fingerprinting of the user device based on the at least one user artifact. The machine transmits the access request to the web service based on the performing of the fingerprinting of the user device. The machine, in response to the transmitting of the access request to the web service, receives a resource access authorization from the web service for the application executing at the user device.