Trusted Login via Server Session Synchronization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional trusted login methods between applications are insecure due to the risk of login information being copied and used across different terminals, compromising security.
Innovation Solution
Implementing a method where servers of associated applications synchronize login states through mutual notifications, eliminating the need for explicit login information transmission and preventing unauthorized access by verifying device identifier information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If login information is transmitted between applications using digital signatures in URL parameters, then trusted login functionality is achieved, but security is compromised due to easy copying of login links
Solution Approach 1:
The patent extracts the login state verification process from the URL parameter transmission and relocates it to a server-side session management system. Instead of relying on client-side digital signatures in URLs, the system extracts authentication state to server-managed sessions, eliminating the security vulnerability of copyable login links while maintaining trusted login functionality.
Solution Approach 2:
The patent introduces a server-side session management intermediary between the client applications. This intermediary (session management module) mediates the authentication process by maintaining login states on the server and verifying them through session identifiers, rather than directly transmitting login information between applications via URL parameters.
2Reliability
If login state is synchronized between servers of associated applications, then security is improved, but system complexity increases
Solution Approach 1:
The patent merges the authentication and session management functions into a unified server-side module. By combining login state management, session verification, and application association logic into a single session management module, the system reduces overall complexity despite adding server-side synchronization capabilities.
Solution Approach 2:
The session management module serves multiple functions: it manages login states, verifies authentication, handles application associations, and controls access permissions. This multi-functional approach consolidates what could be separate complex systems into a single versatile component, reducing overall system complexity while improving security.
Data Source
Figure 1
Figure 2~3
Figure 4~5
AI summary
The present application provides a trusted login method and apparatus. The method includes: acquiring device identifier information of a user login device after a first login state of a user in a first application is established, and associating the device identifier information with the first login state; and sending the device identifier information and the first login state to a server of a second application, the second application being a trusted login application associated with the first application, such that the server establishes a second login state of the user in the second application according to the first login state, and associates the device identifier information with the second login state. The present application can improve the security of trusted login.