Widget Authentication via Delegation Server for Social Graph Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Organizations face challenges in adding social networking features to their websites without having to implement these features from scratch or rely on third-party social networks, as existing solutions require user information sharing and leave users on external networks.
Innovation Solution
The system authenticates widget access by using a trusted delegation server to verify user identity and deliver widgets with user context, allowing secure access to social graphs while enabling trusted widgets to modify the graph if trusted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If organizations implement social networking features from scratch, then they have full control over user information and features, but it requires significant implementation effort and resources
Solution Approach 1:
The patent introduces a delegation server as an intermediary between the content server and social network server. The delegation server receives authentication requests, verifies user identity, and returns authentication tokens. This intermediary approach allows organizations to integrate social networking features without implementing them from scratch, reducing implementation effort while maintaining control through the trusted delegation server
2Ease of manufacture
If organizations use third-party social networks, then implementation is easier, but user information must be shared and users must leave the initial site
Solution Approach 1:
The delegation server acts as a trusted intermediary that enables authentication without direct integration with third-party social networks. Users authenticate through the delegation server which returns tokens to the content server, allowing users to remain on the organization's site while still accessing social networking features without sharing user information with external networks
Solution Approach 2:
The system segments the authentication process into separate components: the content server handles the organization's web properties, the delegation server handles authentication verification, and the social network server handles social graph data. This segmentation allows the organization to control which components are used and how user information is handled, avoiding forced integration with third-party networks
3Reliability
If widgets are delivered with user context for authenticated access, then secure access is improved, but the system complexity increases
Solution Approach 1:
The system performs preliminary authentication actions by delivering widgets with embedded user context and authentication tokens before the user actually interacts with the widget. The content server receives the widget request, obtains user context from the delegation server, and embeds this context in the widget delivery. This preliminary action ensures secure access is established in advance, simplifying subsequent widget operations while maintaining security
Solution Approach 2:
The delegation server provides feedback to the content server by returning user identity and authentication status based on the user identifier received. This feedback mechanism allows the content server to make informed decisions about widget delivery and access control without implementing complex authentication logic itself, maintaining security while managing system complexity through clear feedback loops
Data Source
AI summary
In some embodiments, a content server receives a request for a widget from a web server, specifying a user identifier and a delegation server. If the delegation server is trusted, the user's identity is ascertained using the user identifier. The widget is delivered having a context of the user's identity. The content server receives a request to access content generated utilizing the widget incorporated into a web page and allows access based on the context of the widget. In other embodiments, a social network server receives a request from a web server for a widget. The widget is delivered having a source indicator. Subsequently, the social network server receives a request to access the social graph generated utilizing the widget incorporated into a web page. If the request includes a change to the social graph, the social network server allows the request if the widget is trusted.