Unified Identity Clouds for Phishing-Resistant Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Managing identity and access privileges across multiple cloud applications is burdensome and complex for organizations, leading to potential security vulnerabilities and inefficiencies.

Innovation Solution

A software platform that automates the registration and integration of applications using a unified identity management system, enabling features like single sign-on, identity governance, and privileged access management across multiple cloud platforms, with passwordless authentication and phish-proof identity solutions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If conventional IGA tools are used to manage identity and access privileges, then some identity management functions can be performed, but the system becomes complex and security vulnerabilities increase

Engineering Contradiction:

Improveease of managing identity and access privilegesVSAvoidcomplexity of identity management system

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The patent combines multiple identity management functions (authentication, authorization, credential verification, session management) into a single unified identity cloud system. This consolidation eliminates the need for separate conventional IGA tools while reducing overall system complexity and improving ease of operation through centralized management.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The identity cloud system performs multiple functions including authentication, authorization, credential verification, and session management through a single unified platform. This multi-functional approach replaces several separate tools with one universal system, reducing complexity while maintaining comprehensive identity management capabilities.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Reliability

If multiple cloud applications are integrated with separate identity management systems, then each application can be secured, but the overall system complexity and management burden increase

Engineering Contradiction:

Improvesecurity of cloud applicationsVSAvoidcomplexity of managing multiple identity systems

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple separate identity management systems into a single unified identity cloud that secures all cloud applications. This consolidation maintains security reliability while eliminating the complexity of managing multiple separate identity systems across different applications.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The unified identity cloud provides universal authentication and authorization services across multiple cloud applications through a single system. This multi-functional approach ensures each application remains secure while simplifying management through centralized control.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Reliability

If conventional authentication methods are used across multiple applications, then each application can verify user identity, but phishing attacks become more successful and security decreases

Engineering Contradiction:

Improveauthentication reliabilityVSAvoidphishing attack susceptibility

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an intermediary identity cloud system that mediates authentication between users and multiple applications. This intermediary verifies credentials centrally and provides secure session management, preventing phishing attacks by ensuring authentication occurs through the trusted intermediary rather than directly through potentially compromised application interfaces.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The unified identity cloud provides universal authentication services that protect against phishing across all integrated applications. By centralizing credential verification and session management in a single trusted system, the solution maintains authentication reliability while blocking phishing attempts that target individual application login interfaces.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12445449B2Techniques for unifying multiple identity clouds

Publication Date: 2025.10.14 OKTA INC

AI summary

Methods, systems, and devices for unifying multiple identity clouds are described. A first platform determines information for an application with multiple capabilities. The information is usable by a second platform for configuring the capabilities via the first platform. The first platform may communicate the information to the second platform via an application programming interface (API). The second platform may obtain a request to configure the application for an account associated with a user of the second platform. In response to the request, the first platform may authenticate the user in accordance with an authentication flow of the application. As a result of the authentication flow, the first platform may obtain a user credential associated with the user and an indication to grant the second platform access to an API credential that is associated with permissions for configuring the capabilities in the application via the first platform.