Web Application Sign-On Control for Session Sharing Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Web applications offer increased convenience but can lead to misuse of access privileges, such as users avoiding payment by using another user's credentials, affecting revenue and system performance.
Innovation Solution
Implementing a single sign-on (SSO) capability to allow users to authenticate once and maintain a single session across devices, and a multiple login prevention (MLP) mechanism to detect and prevent simultaneous logins from multiple endpoints.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If web applications allow access from multiple devices and browsers, then user convenience and accessibility are improved, but the risk of misuse of access privileges and revenue loss increases
Solution Approach 1:
The system continuously monitors login events and device information, comparing current login attempts against existing sessions to detect suspicious patterns. When a user logs in from a new device or location, the system provides feedback by detecting the change and can trigger security measures such as requiring re-authentication or blocking the session, thus preventing misuse while allowing legitimate multi-device access
Solution Approach 2:
The patent introduces a session management intermediary layer between the authentication system and the web application. This intermediary tracks login events, device fingerprints, and session states to mediate between allowing multi-device access and preventing unauthorized use. The intermediary can distinguish between legitimate users accessing from different devices and malicious actors attempting to share credentials
2Reliability
If users must sign on to web applications from each device separately, then security is improved, but user convenience and time efficiency deteriorate
Solution Approach 1:
The system performs preliminary authentication once and stores the session state, allowing the user to access the web application from different devices without repeating the full authentication process. The preliminary action of verifying credentials and device trustworthiness is done upfront, and subsequent access is granted based on the established session, significantly reducing the time required for repeated logins while maintaining security through continuous session validation
Solution Approach 2:
The session management system provides universal access across multiple devices and browsers by maintaining a unified session state that can be accessed from any client. Instead of requiring device-specific authentication, the system creates a universal session that can be picked up and continued from different devices, improving time efficiency while preserving security through centralized session control
3Adaptability or versatility
If multiple simultaneous logins are allowed, then user accessibility is improved, but system capacity and performance for fee-paying users deteriorate
Solution Approach 1:
The system monitors login patterns and provides feedback about session status to both users and administrators. When a user attempts to log in from multiple devices simultaneously, the system detects the pattern and can provide feedback by limiting the number of active sessions or requiring additional verification. This feedback mechanism allows the system to maintain accessibility for legitimate users while protecting system capacity from being overwhelmed by unauthorized multi-device access
Data Source
AI summary
The described technology provides a single sign-on capability so that a user who is already signed on to a web application from a client application may not be required to sign-on again when he/she later needs access to the web application from the same or another client application. The technology also provides a multiple login prevention capability to detect multiple sign-on events using the same credentials and disable one or more of the associated multiple sessions.