US 10,476,733 B2Granted

Single sign-on system and single sign-on method

AssigneeHitachi Systems, Ltd.

InventorMineyuki Tamura

Life of this patent

Estimating the term…

Loading patent…

Abstract

Even if a user ID of a target user is not stored in a cooperation destination Web site, it is possible to access the cooperation destination Web site by use of a user ID of a cooperation source Web site. According to a typical embodiment, a cooperation source application calls up a log-in API of a cooperation destination Web server, based on information including the user ID. The log-in API records the information including the user ID as redirect information, creates a redirect token, and adds the redirect token to a URL of a guide application to send the URL. Based on the sent URL, the cooperation source application redirects access to the guide application. When the redirect information identified by the redirect token included in the URL is recorded, the guide application creates a log-in cookie based on the user ID included in the redirect information, and redirects the access to a cooperation destination application.

A single sign-on system comprising:

a first Web server including a first application implemented on a first server device;
and a second web server including a second application implemented on a second server device, wherein, in response to a request for accessing the second application from a user having logged in to the first application through a Web browser of an information processing terminal, the system allows the user to log in to the second application by use of a user identification (ID) by which the user has logged in to the first application,
wherein the second Web server further includes:
a log-in interface logging in to the second application through single sign-on;
and
a third application receiving access through the Web browser, the access being redirected by the first application to the third application,
wherein, when receiving the request for accessing the second application from the user, the first application calls up the log-in interface of the second Web server, based on information on the user including the user ID,
wherein, when called up by the first application, the log-in interface records the information on the user including the user ID, as redirect information, creates a redirect token for identifying the redirect information, and adds the redirect token to a Uniform Resource Locator (URL) for accessing the third application and sends the URL,
wherein, based on the URL sent in response to the call-up of the log-in interface, the first application redirects the access through the Web browser to the third application, and
wherein, in response to the redirected access through the Web browser, when the redirect information identified by the redirect token included in the URL is recorded in the second Web server, the third application creates a log-in cookie related to the second application, based on the user ID included in the redirect information, and redirects the access through the Web browser to the second application.

7 more elements

Facts

Application

15/563,618Filed 15 Apr 2015

Published

US 2018/0091355 A129 Mar 2018

Granted

12 Nov 2019

Term ends

Not estimatedThe source records don’t support an estimate.

Classification8 codes

H04L 63/0815
For authentication of entities: providing single-sign-on or federations
G06F 16/955
Retrieval from the web: using information identifiers, e.g. uniform resource locators [URL]
G06F 16/9574
Browsing optimisation, e.g. caching or content distillation: of access to content, e.g. by caching
G06F 21/41
User authentication: where a single sign-on provides access to a plurality of computers

Abstract

Claims6