URI Redirection Service for Secure Chat Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing URI redirection systems lack efficient mechanisms for secure and scalable authentication, especially in private chat systems, where managing multiple authentication services can be cumbersome and complex.

Innovation Solution

A URI redirection service generates an intermediate URI that directs users through an intermediate service for authentication, utilizing various authentication services like social networks and email verification, and passes data to the destination URI, ensuring secure and conditional access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a private chat system implements its own authentication mechanisms, then security and control are improved, but device complexity and operational burden increase

Engineering Contradiction:
Improveauthentication securityVSAvoidauthentication management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediate service that acts as a mediator between the private chat system and multiple authentication services. This intermediate service receives authentication requests, coordinates with various authentication providers (social networks, email verification, etc.), and returns authentication results. By inserting this intermediary layer, the chat system gains secure multi-service authentication capabilities without directly managing the complexity of individual authentication services.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If multiple authentication services are integrated directly into the chat system, then authentication versatility is improved, but ease of operation and maintenance deteriorate

Engineering Contradiction:
Improveauthentication service varietyVSAvoidauthentication management ease
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The patent extracts the authentication management functionality from the private chat system and places it in a separate intermediate service. This extraction allows the chat system to benefit from versatile authentication options without bearing the operational burden of managing multiple authentication services. The intermediate service independently handles integration with various authentication providers, making the overall system easier to operate and maintain.

Inventive Principle:
Principle #2Taking out (Extraction)

3Measurement precision

If authentication data is collected and processed during redirection, then measurement precision and user verification accuracy are improved, but loss of time and processing overhead increase

Engineering Contradiction:
Improveuser identity verification accuracyVSAvoidauthentication processing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The intermediate service performs authentication data collection and processing in advance during the redirection phase, before the user accesses the private chat session. By completing verification activities beforehand and caching authentication results, the system achieves high verification accuracy without adding significant time delays to the actual chat session establishment.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS9516009B2Authenticating redirection service
Publication Date: 2016.12.06 TETRAPOD SOFTWARE
  • US9516009B2 patent drawing
  • US9516009B2 patent drawing
  • US9516009B2 patent drawing

AI summary

A redirection service may receive a destination URI plus a set of conditions for reaching the URI. The conditions may include authentication conditions. The service may generate an intermediate URI which may direct to an intermediate service. The intermediate service may execute the various conditions, then redirect to the destination URI. In some cases, the intermediate service may pass data to the destination URI, and such data may include data gathered while executing the various conditions. The intermediate service may accessed through an Application Programming Interface (API). An example use scenario for the redirection service may be to generate publically publishable URIs for a private chat service, where an intermediate URI may be generated for a specific user or group of users, and may permit only those users to access a private chat room through the publically available URI.