Swappable User Authentication Services
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing operating system (OS) integrated authentication mechanisms in computing devices lack flexibility and require extensive modifications to implement alternative or more secure authentication methods, which can be time-consuming and costly, especially for large enterprises.
Innovation Solution
A method that provides a graphical user interface (GUI) independent of the OS, allowing user authentication through a remote user authentication server, where user credentials are verified, and authorization tokens are synchronized or generated, enabling secure access without modifying the OS.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If OS integrated authentication mechanisms are used, then authentication is provided as part of the operating system, but flexibility to implement alternative authentication approaches is reduced
Solution Approach 1:
The authentication system is segmented into separate components: the OS provides basic authentication framework while alternative authentication mechanisms operate as independent modules or services that can be added without modifying the core OS, allowing both reliability and flexibility
Solution Approach 2:
An intermediary authentication service or plugin architecture is introduced between the user and the OS authentication mechanism, allowing alternative authentication approaches to be implemented without directly modifying the OS, thus maintaining both security and adaptability
2Reliability
If alternative authentication mechanisms are implemented through OS modification, then more secure authentication process is achieved, but time consumption and cost increase
Solution Approach 1:
Authentication mechanisms are pre-configured and packaged as standalone services or plugins that can be deployed without time-consuming OS modifications, allowing enterprises to implement secure authentication quickly across multiple devices
Solution Approach 2:
Instead of modifying each OS instance, a standardized authentication service model is created and copied/deployed across multiple computing devices, reducing the time and effort required for implementation while maintaining consistent security standards
3Adaptability or versatility
If OS modifications are made for each computing device, then desired authentication process is implemented, but complexity and expense increase
Solution Approach 1:
A universal authentication service framework is developed that can function across different OS versions and computing devices without requiring device-specific modifications, allowing customized authentication processes to be implemented through a single standardized approach
Solution Approach 2:
An intermediary authentication service layer is introduced that handles customized authentication processes without requiring modifications to the underlying OS or individual computing devices, reducing system complexity while maintaining authentication flexibility
Data Source
AI summary
Methods and apparatus for authenticating computing device users are disclosed. An example method includes, providing, on a display device of a computing device, a graphical user interface (GUI) including a user authentication display portion and receiving, from a remote authentication server, visual content and functional content corresponding with the user authentication display portion. The method further includes receiving, via the user authentication display portion, a set of user credentials and communicating the received user credentials to the remote user authentication server. The method still further includes receiving, from the remote user authentication server; an authorization message indicating whether or not authentication of the user credentials was successful. In the event authentication of the set of user credentials was successful, the user is granted access to the computing device. In the event authentication of the set of user credentials was not successful, the user is denied access to the computing device.