Temporary Trusted Login Token for Secure Application Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing user account login systems are vulnerable to unauthorized access when a trusted application is hacked, allowing attackers to bypass security measures and access additional applications with more restrictive security requirements.
Innovation Solution
Implementing a temporary trusted login token system that generates a token with service authorization for limited access, which is sent to the originating application, allowing access to specific service pages while preventing unauthorized access to other pages, thereby enhancing security and user experience by eliminating the need for additional login steps.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If trusted login information is provided to allow automatic login to application B from application A, then user convenience is improved by eliminating additional login steps, but security is worsened because hacked application A can be used to access application B with more restrictive security requirements
Solution Approach 1:
The patent segments the trusted login process by introducing intermediate verification steps between application A and application B. Instead of direct trusted access, the system divides the login flow into multiple stages: application A initiates login, a verification server checks credentials, and then grants access to application B. This segmentation prevents compromised application A from directly accessing application B without independent verification.
Solution Approach 2:
The patent introduces a verification server as an intermediary between application A and application B. This mediator receives login requests from application A, independently verifies user credentials against application B's security requirements, and then grants or denies access. The intermediary prevents direct trusted login exploitation by adding an independent verification layer that cannot be compromised by hacking application A.
2Ease of operation
If service pages are returned to the originating application after trusted login, then user experience is improved by avoiding redirection to target application, but security is worsened by potentially exposing sensitive service pages to unauthorized access
Solution Approach 1:
The patent applies preliminary action by performing security verification and access authorization before returning service pages to the originating application. The verification server checks credentials and grants explicit permission before the service page is made available to application A. This preliminary security check ensures that even if application A is compromised, it can only receive service pages for which explicit authorization has been granted, preventing unauthorized access to sensitive pages.
Data Source
AI summary
Technologies related to trusted user account login are disclosed. In one implementation, a temporary trusted login token request for accessing a service page from an originating application is received. A temporary trusted login token based on the temporary trusted login token request is generated. The temporary trusted login token is sent to the originating application. A service page access request is received for accessing the service page generated based on the temporary trusted login token. The temporary trusted login token including the service authorization from the service page access request is identified. Whether the service page is included in the one or more service pages that are identified by the service authorization is determined, and trusted login to the service page from the originating application is allowed if the service page is included in the one or more service pages.