Security Object Creation for SSO Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Single-factor authentication methods are vulnerable to security breaches, as hackers can gain access to network resources using a single password, leading to increased security risks, and multi-factor authentication can be burdensome for users.
Innovation Solution
A system that provides single-sign-on (SSO) credentials for mobile devices by creating and validating a security object, which serves as an additional authentication factor, allowing users to access multiple network resources with reduced user interaction through a combination of device characteristics and one-time passwords.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multi-factor authentication is implemented, then security is improved, but user burden increases
Solution Approach 1:
The system performs preliminary actions by automatically detecting device characteristics (device fingerprint) and pre-establishing authentication credentials before the user needs to access network resources. When authentication is required, the system retrieves pre-computed device fingerprints and compares them with stored credentials, eliminating the need for users to manually provide biometric data or security tokens during each access attempt.
Solution Approach 2:
The authentication system performs self-service by automatically detecting, validating, and storing device characteristics without requiring user intervention. The system autonomously creates device fingerprints from detected characteristics, validates them against stored credentials, and manages the entire authentication process without manual user input for each authentication event.
2Reliability
If multiple authentication factors are required, then security against hackers is improved, but authentication efficiency decreases
Solution Approach 1:
The system performs preliminary actions by pre-computing device fingerprints from device characteristics and storing them in advance. During authentication events, the system simply retrieves and compares pre-stored fingerprints, dramatically reducing authentication time while maintaining multi-factor security through the use of device-specific cryptographic credentials.
Solution Approach 2:
The system creates a copy of device characteristics in the form of a device fingerprint, which serves as a reusable authentication credential. Instead of requiring users to provide biometric data or security tokens during each authentication event, the system uses a pre-computed fingerprint copy that can be quickly compared with stored credentials, improving authentication efficiency while maintaining security.
Data Source
AI summary
A security object creation and validation system provides an additional factor of authentication. An authentication system as described herein provides secure two-factor authentication, such as for IT resources in an organization. The authentication system can perform generation of a security object (such as an X.509 object, Java object, persistent browser token, or other digital certificate); registration of the generated security object or of an existing security object (such as a near field communication identifier, smart card identifier, OATH token, etc.); validation of the security object as part of an authentication process; and assertion of the identity of the security object to native network resources (such as web resources, network resources, cloud resources, mobile applications, and the like) that may accept the security object. The authentication system may provide user interfaces to allow users and administrators to manage registered device inventory and revoke security objects.