Single Sign-On Authentication via Intermediary Key Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems face challenges in ensuring data integrity and security during transmission, as well as managing multiple login credentials efficiently, leading to potential interception and compromise of sensitive information.
Innovation Solution
A system server is implemented to provide single sign-on services by using device identifiers and passwords to encrypt and decrypt data, ensuring secure communication between client devices and application servers, and managing access through a central computing system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If login credentials are stored locally at the mobile device, then ease of operation is improved, but security is worsened due to potential interception and compromise
Solution Approach 1:
A system server acts as an intermediary between the mobile device and application servers. The system server receives encrypted data from the mobile device, decrypts it using a first key, re-encrypts it with a second key, and forwards it to the application server. This intermediary approach allows credentials to be stored locally for ease of operation while maintaining security through centralized key management and encrypted transmission.
2Ease of operation
If multiple login credentials are managed through a digital wallet, then ease of operation is improved, but device complexity is worsened
Solution Approach 1:
The system server serves as a centralized intermediary that manages multiple credentials and encryption keys. Instead of managing complex encryption and credential storage locally at each device, the system server handles key generation, storage, and credential management, reducing device complexity while maintaining ease of operation for users.
3Productivity
If data is transmitted directly from mobile device to application server, then productivity is improved, but security is worsened due to lack of encryption management
Solution Approach 1:
The system server acts as a security intermediary that performs encryption and decryption operations. Data transmission from mobile device to application server goes through the system server which ensures proper encryption management using device-specific keys and application-specific keys, maintaining both security and productivity through automated key management.
Solution Approach 2:
The system uses different encryption keys for different transmission contexts: a first key for decrypting data from the mobile device and a second key for encrypting data before forwarding to the application server. This parameter change approach allows flexible security management while maintaining efficient data transmission.
4Reliability
If encryption and decryption operations are performed at the mobile device, then security is improved, but processor load is worsened
Solution Approach 1:
The system server acts as an intermediary that performs the computationally intensive encryption and decryption operations. The mobile device only needs to transmit encrypted data and receive decrypted data, significantly reducing its processor load while the system server handles the security-critical cryptographic operations.
Data Source
AI summary
Embodiments of the disclosure enable a system to provide authentication services. The system includes a system server that receives data associated with an application service, uses a first key associated with a device identifier corresponding to a user device to decrypt the data associated with the application service, uses a second key associated with a password stored at the system server to encrypt the data associated with the application service, and transmits, to an application server, the data associated with the application service such that the application server is configured to provide the application service for a user associated with the user device. Aspects of the disclosure provide for transmitting sensitive data in a secure and user-friendly manner.