Single Sign-On Authentication Using Unique Machine Identifications
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face inconvenience and security risks when accessing protected services from multiple computing devices, as they need to log in separately to each device and manage multiple sessions, leading to redundant authentication and increased session management for application servers.
Innovation Solution
Implementing a single sign-on technology that uses unique machine identifications and shared authentication tokens across multiple computing devices, allowing a user to access a protected service from one device and switch between others without re-authentication, while enabling a single shared session and unified logout.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate login sessions are maintained for each computing device, then security is improved through individual authentication, but user convenience deteriorates due to redundant login processes across multiple devices
Solution Approach 1:
The patent implements a universal authentication token that serves multiple devices simultaneously. A single authentication token generated from one device can be used across multiple computing devices, allowing the same authentication credential to perform the authentication function universally across different devices, thereby eliminating redundant logins while maintaining security
Solution Approach 2:
The patent merges multiple separate authentication sessions into a single unified session. By combining the authentication states of multiple devices under one session identifier, the system allows users to log in once and access the application from multiple devices without separate authentication, resolving the contradiction between security and convenience
2Reliability
If multiple separate sessions are maintained for multiple devices, then device-specific access control is improved, but session management complexity increases for the application server
Solution Approach 1:
The patent merges multiple device-specific sessions into a single shared session identified by a common session identifier. Instead of maintaining separate session states for each device, the system consolidates them into one session that can be accessed by multiple devices, significantly reducing the session management burden on the application server while preserving access control through the authentication token mechanism
3Reliability
If separate authentication is required for each device, then security through individual verification is improved, but time consumption increases due to repeated login processes
Solution Approach 1:
The patent performs authentication preliminarily on one device and stores the resulting authentication token for reuse. The initial authentication action is performed once, and the resulting token is then used across multiple devices without requiring repeated authentication processes, thereby eliminating time-consuming redundant logins while maintaining security through the pre-established authentication credential
Data Source
AI summary
Single sign on technology enables shared access to a protected service, such as an application, from a plurality of dynamically associated computing devices. After logging into the application from one of the computing device, a user may access the application from the other computing devices without re-authentication. A user may also log out from the application from any of the computing device. Unique machine identifications, such as device DNA, for identifying each of the computing devices are used in, for example, a method, apparatus (such as a login server) and computer program product. A single session may be shared across multiple computing devices. The same authentication token, such as a SAML token, may also be used for all of the computing devices having the same user session.