Multi-App Verification via Shared Identity Tokens
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional phone number verification methods using SMS OTP codes are costly and inefficient, requiring users to verify their phone number for multiple applications individually, and do not allow sharing of verifiers across apps.
Innovation Solution
A system and method for multi-application registration and verification that allows users to register for multiple applications without verifying their phone number through SMS OTP codes, using a query and encryption protocol exchange between user applications, their web clients, and application servers, and enabling the sharing of verifiers across apps based on verified OTP codes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If phone number verification using SMS OTP codes is implemented for each application individually, then security of user applications is enhanced, but verification cost increases and efficiency decreases
Solution Approach 1:
The patent implements a universal verification system where a single phone number verification result is shared across multiple applications through a common identity provider. The verification token generated by one application can be reused for authentication in other applications, making the verification mechanism multi-functional and eliminating redundant SMS OTP requests.
Solution Approach 2:
The patent merges the verification processes of multiple applications into a unified system. By combining individual application verifications into a single shared verification mechanism through an identity provider, the system reduces the total number of verification operations while maintaining security across all applications.
2Reliability
If phone number verification using SMS OTP codes is implemented for each application individually, then security of user applications is enhanced, but verification efficiency decreases
Solution Approach 1:
The verification token generated through the unified system serves multiple applications simultaneously. A single verification action produces a token that can be used across different applications, making the verification process universal and significantly improving efficiency by eliminating repeated verification steps.
Solution Approach 2:
The system performs verification in advance through a unified identity provider, generating tokens that can be reused. This preliminary verification action eliminates the need for repeated SMS OTP requests when users access multiple applications, thereby improving verification efficiency.
3Reliability
If individual phone number verification is required for each application, then security is maintained, but user registration process becomes more complex
Solution Approach 1:
The patent implements a universal verification mechanism where a single verification process serves multiple applications. The identity provider manages verification tokens that work across different applications, simplifying the registration process while maintaining security through centralized token management.
Data Source
AI summary
Methods, systems, and storage media for multi-application registration and verification are disclosed. Exemplary implementations may: identify a gateway application programming interface (API) on a client device, wherein the gateway API is configured to communicate with a plurality of auxiliary APIs associated with the client device; register the client device via the gateway API; verify registration of the client device; and create at least one verifier configured to communicate between the plurality of auxiliary APIs associated with the client device; and accessing the plurality of auxiliary APIs associated with the client device via the at least one verifier.