SMS Hyperlink Authentication for Social Campaign Content
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face difficulties in sharing content from events or offline promotions due to challenges with entering web URLs and authentication processes, especially in environments with weak or non-existent cellular internet, and existing methods require multiple interactions for ownership authentication.
Innovation Solution
A method and system using dual-purpose hyperlinks sent via cellular messaging that authenticate ownership upon first access, embedding a cookie for subsequent access without re-authentication, allowing owners to edit or share content while restricting non-owners to only viewing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users enter web URLs manually on mobile phones, then content can be accessed, but the process becomes difficult and time-consuming especially in crowded events with weak cellular internet
Solution Approach 1:
The system pre-generates shortened URLs with embedded authentication tokens before users need to access content. These pre-configured URLs are sent via SMS, eliminating the need for users to manually enter long web addresses at the moment of access, thus saving time and simplifying the operation especially in environments with poor internet connectivity
Solution Approach 2:
The patent extracts the authentication mechanism from the traditional web login process and embeds it directly into the URL itself through token-based authentication. This separates the authentication function from the content access function, allowing users to access content directly via the SMS link without needing to go through a separate login page, thereby reducing time and simplifying the process
2Reliability
If users create password accounts for temporary processes, then secure authentication is achieved, but participation decreases due to the annoyance of password creation
Solution Approach 1:
The system performs automatic authentication by embedding unique tokens directly in the SMS links. The server automatically validates these tokens without requiring users to manually create accounts or remember passwords. This self-service approach maintains security through token validation while eliminating the frustrating password creation step that reduces participation
Solution Approach 2:
The patent introduces token-based authentication as an intermediary between the user and the content. Instead of direct password-based authentication, the token acts as a mediator that carries authentication information, allowing the system to verify user identity securely without requiring users to interact with complex login forms or remember passwords
3Reliability
If multiple interactions are required for ownership authentication, then secure access control is maintained, but user experience deteriorates with increased complexity
Solution Approach 1:
The patent combines multiple authentication functions into a single SMS link. The URL embeds the user's identity, the content identifier, and authentication token all in one place. When the user clicks the link, all verification steps are performed automatically by the server, merging what would traditionally be separate authentication interactions into a single seamless action that maintains security while reducing complexity
Data Source
AI summary
A computer-implemented method and system for automatically authenticating ownership of uploaded content to a server by cellular messaging is described. Content is uploaded to a server by cellular messaging. If the user has a user account, the user account is retrieved. If not, a user account is created. A URL is created and mapped to the content and the user account and sent as a hyperlink by cellular messaging to the user. Upon a first activation of the hyperlink, the user is authenticated as an owner of the content. A cookie is embedded in the owner's device. Upon a subsequent activation of the hyperlink, if the cookie is detected in the user's device, the owner is allowed to access, edit, download, or share the content. If the cookie is not detected, the user is not an owner, so the user is only allowed to access and not edit the content.