Stateless Verification of User Communication Addresses
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing verification systems for user communication addresses, such as phone numbers and email addresses, require temporary storage of verification codes at the server, leading to resource inefficiencies and the need for periodic data clearing, which can be cumbersome and resource-intensive.
Innovation Solution
A stateless verification method where encrypted data is provided to the client, allowing users to verify communication addresses without the need for temporary storage at the server, using a verification code that is transmitted to the user's communication address and then returned to the server for verification, eliminating the need for persistent storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If verification codes are temporarily stored at the server, then verification can be performed, but data storage resources are consumed and periodic clearing is required
Solution Approach 1:
The patent extracts the verification code from server storage and places it directly into the user's session memory. The verification code is generated by the server, sent to the user, and then stored in the user's session rather than the server's temporary storage, eliminating the need for server-side temporary data retention.
Solution Approach 2:
The user's session serves itself by storing the verification code locally in the session memory. The session automatically manages the verification code lifecycle - storing it when received, maintaining it during the verification window, and discarding it after verification or expiration - without requiring server intervention for storage or periodic clearing.
2Reliability
If verification codes are stored temporarily, then verification process can be completed, but processing resources are wasted on periodic data clearing
Solution Approach 1:
The session automatically manages verification code lifecycle without server intervention. When verification is completed or the time window expires, the session automatically discards the verification code, eliminating the need for server-side periodic clearing operations and associated processing resources.
Solution Approach 2:
Instead of periodic server-side clearing operations, the system uses individual session lifecycles with automatic expiration. Each session independently manages its own verification codes with time-based expiration, converting a periodic batch clearing operation into continuous individual session management.
3Productivity
If encrypted data is provided to client without server storage, then resource efficiency improves, but verification process complexity increases
Solution Approach 1:
The user session acts as an intermediary between the server and the verification code. The server generates and sends the verification code to the user, the session stores and manages it locally, and when verification is needed, the session provides the code without requiring server-side storage or retrieval operations.
Data Source
AI summary
Disclosed are various embodiments for performing stateless verification of communication addresses. Encrypted verification data is generated for a user account, including a communication address and a first verification code, and a timestamp. The encrypted verification data is sent to a client, and the verification code is transmitted to the communication address. The encrypted verification data and a second verification code are received from the client. The communication address is verified in response to observing that the first verification code from the encrypted verification data matches the second verification code.