# US 10,375,064 B2 · Method, apparatus, and system for remotely accessing cloud applications > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,375,064 B2 - Document ID: US10375064B2 - Status: Granted - Kind: B2 - Application number: 15/564,177 - Filed: 2016-03-21 - Published: 2018-05-10 - Granted: 2019-08-06 - Earliest claimed: 2015-04-07 - Assignees: Alibaba Group Holding Limited - Applicants: Alibaba Group Holding Limited; Qiang Fang; Hongru Zhu; Qing An; Yingfang Fu - Inventors: Qiang Fang; Hongru Zhu; Qing An; Yingfang Fu - Web page: https://patentgrep.com/patent/US10375064B2 ## CPC - H04L 63/0838: {using one-time-passwords} - G06F 21/128: {involving web programs, i.e. using technology especially used in internet, generally interacting with a web browser, e.g. hypertext markup language [HTML], applets, java} - G06F 21/33: using certificates - H04L 63/067: {using one-time keys (cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863)} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) - H04L 63/10: {for controlling access to devices or network resources} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Disclosed herein are methods, apparatuses, and systems for remotely accessing cloud applications. In one embodiment, the method comprises receiving an access request of a requester, sent by a cloud server, requesting being accessed by a controlling party; establishing a secure channel with the cloud server based on the access request of the requester, sent by the cloud server, requesting being accessed by the controlling party; receiving, via the safety channel, a login key generated based on the access request of the requester sent by the cloud server; generating, based on the login key, a login request for logging into the requester and sending the login request to the cloud server; receiving mode information of a login success returned by the cloud server after the cloud server verifies the login request; and receiving current mode information of the requester pushed by the cloud server, and entering a remote access mode for the requester. The disclosed embodiments can solve the following problems: remote access is not possible between different operating systems; a request for remote access cannot be made between terminals; and wasting unnecessary resources on site traffic. In addition, the method also prevents the risk of password leakage during remote access. ## Claims ### Claim 1 A method comprising: receiving, by a server, an access request from a device of a requester, the access request requesting access by a controlling party and comprising account information of the requester; transmitting, by the server, the access request to a device of the controlling party; receiving, by the server, a login request from the controlling party for logging into the requester device, the login request including a login key and account information of the requester; receiving, by the server, current mode information from the requester device upon verifying the login request; and entering, by the server, a remote access mode for the requester device in response to receiving the current mode information. ### Claim 2 (depends on 1) The method of claim 1, further comprising receiving, at the server, feedback information generated in response to the access request based on a result of a selection operation performed at the controlling device. ### Claim 3 (depends on 2) The method of claim 2, further comprising: causing, by the server, a selection window to be displayed at the controlling device, the selection window including an approval button and a denial button; and receiving, by the server, a selection operation performed on one of the approval button or the denial button. ### Claim 4 (depends on 1) The method of claim 1, further comprising: establishing, by the server, a secure channel with the controlling device; transmitting, via the secure channel, a login key to the controlling device, the login key generated based on the access request. ### Claim 5 (depends on 4) The method of claim 4 wherein establishing a secure channel with the controlling device comprises: receiving, at the server, a request to establish the secure channel from the controlling device, the request to establish the secure channel comprising a digital certificate of the controlling device; transmitting, by the server, feedback information to the controlling device, the feedback information including information regarding the secure channel; and establishing, by the server, the secure channel if the feedback information indicates an approval to establish the secure channel. ### Claim 6 (depends on 1) The method of claim 1, wherein the login key includes account information of the requester, account information of the controlling party, a timestamp when the login key was generated, and a verification code. ### Claim 7 (depends on 1) The method of claim 1, further comprising: receiving, at the server from the controlling device, an operation performed on the requester device; and receiving, at the server, a result of the operation. ### Claim 8 (depends on 7) The method of claim 7, wherein receiving current mode information of the requester device further comprises requesting that a local computation of the requester device be stopped prior to receiving the current mode information. ### Claim 9 (depends on 1) The method of claim 1, wherein the login request further includes a password of the requester device. ### Claim 10 An apparatus comprising: a processor; and a non-transitory memory storing computer-executable instructions therein that, when executed by the processor, cause the apparatus to perform the operations of: receiving an access request from a device of a requester, the access request requesting access by a controlling party and comprising account information of the requester; transmitting, to a device of a controlling party, the access request to a device of the controlling party; receiving a login request from the controlling party for logging into the requester device, the login request including a login key and account information of the requester; receiving current mode information from the requester device upon verifying the login request; and entering a remote access mode for the requester device in response to receiving the current mode information. ### Claim 11 (depends on 10) The apparatus of claim 10, wherein the operations further include receiving feedback information generated in response to the access request based on a result of a selection operation performed at the controlling device. ### Claim 12 (depends on 11) The apparatus of claim 11, wherein the operations further include: causing a selection window to be displayed at the controlling device, the selection window including an approval button and a denial button; and receiving a selection operation performed on one of the approval button or the denial button. ### Claim 13 (depends on 10) The apparatus of claim 10, wherein the operations further include: establishing a secure channel with the controlling device; transmitting, via the secure channel, a login key to the controlling device, the login key generated based on the access request. ### Claim 14 (depends on 13) The apparatus of claim 13 wherein establishing a secure channel with the controlling device comprises: receiving a request to establish the secure channel from the controlling device, the request to establish the secure channel comprising a digital certificate of the controlling device; transmitting feedback information to the controlling device, the feedback information including information regarding the secure channel; and establishing the secure channel if the feedback information indicates an approval to establish the secure channel. ### Claim 15 (depends on 10) The apparatus of claim 10, wherein the login key includes account information of the requester, account information of the controlling party, a timestamp when the login key was generated, and a verification code. ### Claim 16 (depends on 10) The apparatus of claim 10, wherein the operations further include: receiving, from the controlling device, an operation performed on the requester; and receiving a result of the operation. ### Claim 17 (depends on 16) The apparatus of claim 16, wherein receiving current mode information of the requester device further comprises requesting that a local computation of the requester device be stopped prior to receiving the current mode information. ### Claim 18 (depends on 10) The apparatus of claim 10, wherein the login request further includes a password of the requester device. ### Claim 19 A system comprising: a controlling device operated by a controlling party; a requester device operated by a requester and configured to generate an access request comprising account information of the requester; and a server configured to: receive an access request from a device of a requester, the access request requesting access by the controlling device and comprising account information of the requester device; transmit, to the controlling device, the access request; receive a login request from the controlling party for logging into the requester device, the login request including a login key and account information of the requester; receive current mode information from the requester device upon verifying the login request; and enter a remote access mode for the requester device in response to receiving the current mode information. ### Claim 20 (depends on 19) The system of claim 19 wherein the server is further configured to: receive a request to establish the secure channel, the request to establish the secure channel comprising a digital certificate of the controlling device; transmit feedback information to the controlling device, the feedback information including information regarding the secure channel; establish the secure channel if the feedback information indicates an approval to establish the secure channel; and transmit, via the secure channel, a login key to the controlling device, the login key generated based on the access request.