Service Locking Mechanism for Unauthorized Access Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing service operating methods fail to prevent unauthorized access and operations on network virtual properties, allowing stolen account and password information to be used for unauthorized activities.
Innovation Solution
A service locking method involving a locking server and authentication server, where identification information is used to authenticate the operating terminal and lock the designated service only if successful authentication occurs, preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a user logs in to a service using account and password, then the user can perform operations on the service, but unauthorized users can steal the account and password and perform unauthorized operations
Solution Approach 1:
The patent segments the service operation process into multiple independent stages: login authentication, service locking, and operation execution. By introducing a service locking mechanism that operates separately from the login process, the system divides the security control into distinct phases, allowing the service to be locked after login and requiring additional authentication for unlocking, thus preventing unauthorized operations even if credentials are stolen
Solution Approach 2:
The patent implements preliminary action by locking the service immediately after successful login authentication. The service is locked before any operations can be performed, and the locking state is maintained until proper unlocking authentication is provided. This preliminary locking action prevents stolen credentials from being used for unauthorized operations, as the service requires the locking mechanism to be bypassed in addition to login credentials
2Reliability
If a service is locked to prevent unauthorized access, then service security is improved, but the service cannot be accessed by authorized users
Solution Approach 1:
The patent implements feedback mechanisms where the system continuously monitors service access requests and authentication outcomes. When an authorized user attempts to access a locked service, the system provides feedback through the unlocking authentication process, guiding the user through the required verification steps. This feedback loop ensures that only authenticated users can access the service while maintaining security, as the system responds appropriately to each access attempt based on authentication status
Data Source
AI summary
Disclosed are method for operating a designated service, a service unlocking method and terminal. The method comprises: receiving an operation request for operating the designated service from a user, the operation request containing identification information of the designated service; sending a state inquiry request to a locking server, wherein, the state inquiry request contains identification information of the designated service, and is used to inquiry current state of the designated service; sending a request for operating the designated service to an operating server related to the designated service when the terminal receives from the locking server a prompt information that indicates permitting to continue to execute the designated service, and receiving a result of operation from the operating server; and conducting no operation to the designated service when the terminal receives from the locking server a prompt information that indicates not permitting to continue to execute the designated service.