Trusted Web Portal Authentication With One-Time Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The cumbersome experience of logging into multiple web services with different credentials and the security risks associated with traditional username-password combinations and single sign-on systems are not adequately addressed by existing technologies.
Innovation Solution
A single trusted portal application on a user's device, authenticated with biometric or knowledge factors, generates and manages one-time codes for secure access to multiple accounts, eliminating the need for dedicated passwords by using QR codes or other communication methods like Bluetooth.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional username and password authentication is used for each web service, then security is maintained for each individual service, but user convenience deteriorates due to the burden of managing multiple credentials
Solution Approach 1:
The patent introduces a trusted single web portal as an intermediary authentication service between users and multiple web services. The portal generates time-limited access codes that users can present to various services, eliminating the need for users to manage multiple passwords while maintaining security through the portal's centralized authentication mechanism
2Ease of operation
If single sign-on (SSO) with one username and password is implemented, then user convenience is improved by reducing the number of passwords, but security deteriorates because a hacker could gain broad access to multiple accounts
Solution Approach 1:
The patent implements dynamic authentication codes that are time-limited and service-specific. Instead of static passwords, the system generates codes that expire after use or within a specific time window, and can be configured to grant access to particular services only. This dynamic approach maintains user convenience while preventing broad unauthorized access
Solution Approach 2:
The patent segments the authentication access by creating service-specific access codes rather than a single universal password. Each code can be tailored to grant access to specific web services, allowing the system to provide convenient single-point authentication while limiting the scope of potential security breaches to individual services
3Reliability
If multiple dedicated passwords are required for different web services, then security is maintained for each service, but device complexity increases due to the need to store and manage multiple credentials
Solution Approach 1:
The trusted single web portal serves as a universal authentication mechanism that can access multiple different web services. Instead of requiring separate password storage and management for each service, the portal provides a single interface that generates appropriate access credentials for various services, reducing device complexity while maintaining service-specific security
Data Source
AI summary
Exemplary methods and systems described herein include using a single portal application for accessing a plurality of secure resources. The system and methods may use a second authentication application for selecting a desired secure resource and authenticating a user. The systems and methods may authenticate a user using different credentials for different secure resource without requiring the user to enter a unique credential for a given secure resource.