Secure Web Authentication via Signed Identity Provider Data Packets
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computer security systems in distributed computing environments are vulnerable to unauthorized access and malicious attacks, particularly due to external data connections, which are necessary for cloud computing but also pose security risks.
Innovation Solution
The implementation of a secure data packet system using HTTP cookies or web cookies that are encrypted, along with asymmetric key cryptography, to authenticate users and verify session authenticity across sub-systems within a distributed computing system, ensuring that only authorized users can access and process data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If external data connections are established for cloud computing, then system functionality and accessibility are improved, but security vulnerability to unauthorized access and malicious attacks increases
Solution Approach 1:
The patent introduces an identity provider subsystem as an intermediary between user devices and the distributed computing system. This intermediary verifies user credentials and issues signed data packets that mediate access requests, thereby enabling cloud computing functionality while maintaining security through centralized authentication control
Solution Approach 2:
The system performs preliminary authentication actions before granting access to cloud computing resources. User credentials are verified in advance by the identity provider, and signed data packets are issued beforehand to authenticate subsequent requests, preventing unauthorized access before it can occur
2Measurement precision
If user credentials are transmitted for verification, then user authentication accuracy is improved, but data transmission overhead increases
Solution Approach 1:
The patent extracts the authentication verification process from the main data transmission flow. User credentials are transmitted separately for verification by the identity provider, and only the resulting signed data packet is transmitted with subsequent requests, reducing redundant credential transmissions while maintaining authentication accuracy
Solution Approach 2:
The system creates a copy of user credentials in the form of a signed data packet issued by the identity provider. This signed packet serves as a reusable authentication token that proves user identity without requiring repeated transmission of original credentials, reducing data overhead while maintaining verification accuracy
Data Source
AI summary
Particular systems, methods, and program products for web-based security systems for user authentication and processing in a distributed computing environment are disclosed. A computing sub-system may receive an electronic processing request and a first signed data packet having a first payload that was hashed and encrypted using a first private key. The first payload may comprise first processing output and a first timestamp. The sub-system may verify the first signed data packet by decrypting it using a first public key. The sub-system may execute computing operations to satisfy the electronic processing request, producing second processing output. The sub-system may configure a data packet with a second payload comprising at least the second processing output and a second timestamp. The sub-system may encrypt the second payload using a second private key producing a second signed data packet. The sub-system may transmit to a second sub-system the second signed data packet.