US 10,382,434 B2Granted

Actively federated mobile authentication

AssigneeMicrosoft Technology Licensing, LLC

InventorsKyle Stapley Young, Robert Aron Drollinger, Robert O'Brien, David J. Runde, Jagruti Dushyant Pandya, Georges El Khoury

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

To make a trusted web service call, a client application sends a series of messages to obtain tokens that allow service requests to pass through a service relay. The user obtains a first security token by providing the user's credentials. A second token is obtained from a trust broker that validates the first token. Both tokens are then sent with a service request to a service relay. The service relay validates the second token and then passes the first token and the service request to a connector service. The connector service validates the first token and passes the service request to a target back end service. The connector service acts as the user when communicating with the back end service. Service responses are routed back to the user through the connector service and the service relay.

Claims12

Dependent claims

A method performed by a client computing device, the method comprising:

sending a user credential over a computer network to an identity provider having an established trust relationship with a hosted service that is hosted by a computing system that is remote from the client computing device,
the user credential being associated with a user of the client computing device;
receiving, from the identity provider over the computer network, a first token including authentication information configured to authenticate a service request with, the hosted service;
sending the, first token to a trust broker that has an established trust relationship with the identity provider;
receiving, from the trust broker in response to the first token, a second token including a form of authentication information that is different than the first token and is configured to authenticate a service relay to send the service request to the hosted service;
sending, to the service relay, the service request with the second token;
and
receiving, from the service relay, a service response indicative of authentication of the client computing device by the hosted service based on the second token.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/725,800Filed 5 Oct 2017 · continuation
Priority: 15 Mar 2013
Published: US 2018/0219862 A12 Aug 2018
Granted: 13 Aug 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04L 63/0869
For authentication of entities: for achieving mutual authentication
H04L 63/061
For supporting key management in a packet data network: for key exchange, e.g. in peer-to-peer networks
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
H04L 63/0815
For authentication of entities: providing single-sign-on or federations

Family

Application61/786,375Us provisional application · filed 15 Mar 2013
Application13/893,029Parent of this continuation · filed 13 May 2013
Application15/047,207Parent of this continuation · filed 18 Feb 2016
US 9,294,454 B2Parent of this continuation · filed 22 Mar 2016
US 2018/0219862 A1Pre-grant publication · published 2 Aug 2018
US 9,825,948 B2Parent of this continuation
US 2014/0282989 A1Published application
US 2016/0164869 A1Published application
US 10,382,434 B2This patent

From the US filing history. Foreign family members aren’t listed.