Cross-Device Login via Server-Mediated Authorization Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing online user account login methods are inconvenient and insecure, requiring repeated input of account and password across devices, which can be exploited by phishing programs.
Innovation Solution
A server system generates a unique identifier with encoded authentication information, which is displayed on a first client device and scanned by a second client device, allowing the server to authenticate the user's access request without requiring manual input of credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a user inputs account and password on each terminal to log in, then the login security is maintained, but the operation convenience deteriorates due to repeated input requirements
Solution Approach 1:
The system performs preliminary login authentication on a first terminal (mobile phone), generates a login authorization code, and stores it on the server. When the user accesses a second terminal (computer), the system automatically retrieves and applies this pre-generated authorization code, eliminating the need for repeated password input while maintaining security through the server-mediated authentication process
Solution Approach 2:
The server acts as an intermediary between the user's credentials and multiple terminals. Instead of directly sharing passwords between devices, the server receives the initial authentication, generates an authorization code, and uses this code to grant access to the second terminal. This intermediary mechanism maintains security while enabling cross-terminal access
2Ease of operation
If a user uses the same account and password on multiple terminals, then the operation convenience is improved, but the security deteriorates as phishing programs can exploit repeated password entry
Solution Approach 1:
The server serves as a secure intermediary that handles authentication centrally. The user enters credentials only once on the first terminal, and the server mediates the authentication process by generating and managing authorization codes. When accessing the second terminal, the user interacts with the server through the authorization code rather than re-entering credentials, eliminating phishing opportunities while maintaining convenient cross-terminal access
Solution Approach 2:
Instead of copying passwords across terminals (which creates security risks), the system creates a copy of the authentication result in the form of a login authorization code on the server. This code can be safely transmitted and used on multiple terminals without exposing the actual credentials, thus preventing phishing attacks while enabling convenient access
3Reliability
If the login process requires manual input of credentials on each terminal, then the security is maintained, but the login efficiency deteriorates
Solution Approach 1:
The system performs the time-consuming authentication process in advance on the first terminal, including password verification and session management. The server stores the authentication result as a login authorization code. When the user accesses the second terminal, the system quickly retrieves and validates this pre-computed authorization code, dramatically improving login efficiency while maintaining the same security level through the server's validation process
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention provides a web page login method involving two client devices and a server. The server receives an information access request from a first client device. In response to the information access request, the server generates a unique identifier and returns the unique identifier to the first client device. The unique identifier is to be displayed on the first client device. Next, the server receives a first message from a second client device, the first message including user account information at the server system and authentication information. The server determines whether the authentication information corresponds to the unique identifier generated by the server system. If the authentication information corresponds to the unique identifier, the server authenticates the information access request such that the user can access information at the server and associated with the user account information from the first client device.