Security Website Automating Sign-On via Intermediary Mediator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing online services face challenges in ensuring secure sign-on processes for authorized users, particularly in managing user access and authentication across multiple commercial servers while maintaining data security and privacy.
Innovation Solution
A method and apparatus for secure sign-on to online services involve a security website that manages user accounts and authentication, using a security server to verify user and device authorization, and automatically filling in credentials to access commercial server websites, ensuring secure access through protocols like HTTPS.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual sign-on process is used for each commercial server, then user control and flexibility are maintained, but security risks increase and user convenience deteriorates
Solution Approach 1:
The patent introduces a security website as an intermediary between users and commercial servers. This intermediary manages authentication credentials and handles the sign-on process automatically, improving both security through centralized management and convenience through automation, while preventing direct exposure of credentials to individual commercial servers
2Ease of operation
If automated credential filling is implemented, then sign-on convenience is improved, but security vulnerabilities may increase due to potential credential exposure
Solution Approach 1:
The security website acts as a mediator that automates the credential filling process without exposing actual credentials to commercial servers. It dynamically generates and submits authentication data through HTTPS connections, achieving automation while maintaining credential security through protocol-level protection and intermediary management
Solution Approach 2:
The system performs preliminary authentication and credential management actions through the security website before actual server access. User credentials are securely stored and pre-validated through the security website, which then automatically submits them when needed, eliminating the need for users to manually enter credentials while maintaining security through advance preparation and controlled disclosure
Data Source
AI summary
A method of providing a security website and verifying, by the security website, that a device of a user is authorized to access another website when the user attempts to access the another website via the security website.