Tokenized Authentication via Social Messaging Servers

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing information systems face challenges in ensuring the security and integrity of user access while optimizing technical operations, particularly in preventing unauthorized access to secured resources.

Innovation Solution

Implementing tokenized authentication techniques across a computing platform that interacts with social messaging servers to validate user accounts and facilitate secure access through client support sessions, utilizing authentication tokens and OAUTH standards.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication methods are used to ensure user access security, then security is maintained, but system complexity and operational inefficiency increase

Engineering Contradiction:

Improveaccess securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an authentication token as an intermediary element that mediates between the user and the secured information system. The token contains authentication credentials and is exchanged through the social messaging server, eliminating the need for complex direct authentication protocols between the user and the information system. This intermediary token simplifies the authentication process while maintaining security.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The authentication process is segmented into distinct components: user credentials, authentication token, validation message, and access grant. Each component serves a specific function in the authentication chain. The authentication token itself is segmented to contain specific authentication data that can be validated independently, reducing the complexity of the overall authentication system.

Inventive Principle:

Principle #1Segmentation

2Reliability

If traditional authentication methods are used to ensure user access security, then security is maintained, but operational efficiency deteriorates

Engineering Contradiction:

Improveaccess securityVSAvoidoperational efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The authentication credentials are preliminarily established and stored in the authentication token before the actual access request. The token is generated and validated in advance through the social messaging server, so that when the user requests access to the information system, the authentication has already been performed. This preliminary authentication action eliminates delays during the actual access operation.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The authentication token acts as a pre-validated intermediary that carries authentication credentials. Instead of performing complex authentication checks during each access operation, the system simply validates the pre-existing token, significantly improving operational efficiency while maintaining security.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If authentication tokens are exchanged through social messaging servers, then unauthorized access is prevented, but communication overhead increases

Engineering Contradiction:

Improveunauthorized access preventionVSAvoidcommunication overhead

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The authentication validation function is extracted from the social messaging server and performed by a dedicated validation component. The social messaging server only needs to exchange the authentication token, while the validation of the token is handled separately. This extraction reduces the communication overhead on the social messaging server while maintaining unauthorized access prevention.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The authentication token serves as a compact intermediary that encapsulates authentication credentials. Instead of exchanging complex authentication data or performing multiple communication rounds, the token provides a single, efficient exchange that prevents unauthorized access while minimizing communication overhead.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS10148646B2Preventing unauthorized access to secured information systems using tokenized authentication techniques

Publication Date: 2018.12.04 BANK OF AMERICA CORP

AI summary

A computing platform may receive, from a social messaging server, a request to authenticate a user to a user account associated with a client portal. In response to receiving the request, the computing platform may send, to the social messaging server, an authentication token request message. Thereafter, the computing platform may receive, from the social messaging server, an authentication token. The computing platform may validate the authentication token received from the social messaging server. Based on validating the authentication token received from the social messaging server, the computing platform may generate a validation message directing a client support server to provide the user with access to the user account. Subsequently, the computing platform may send the validation message to the client support server, which may cause the client support server to initiate a client support session with the user via the social messaging service provided by the social messaging server.