Back to results
US 10,652,746 B2Granted
Secure device access token
AssigneeT-Mobile USA, Inc.
InventorsMichael Engan, Douglas McDorman, Senthil Kumar Mulluppadi Velusamy
Life of this patent
Estimating the term…
Abstract
A secure device access token allows a server to verify that a device presenting the token for access to the server is an authorized device and that an application presenting the token is an authorized application as it purports to be. The secure device access token is unique to the device and to the application attempting to access the server. The secure device access token differs from a bearer token in that it is unique to the device and to the application.
Claims19
A method, comprising:
- obtaining, from a cellular network service connection, a device identifier that identifies a device;
- obtaining access by the device to a first network service provided by a wireless telecommunication carrier by way of the cellular network service connection using the device identifier to authenticate the device;
- initiating a process to obtain, from an identity provider, a secure device access token in accordance with a request to the identity provider that includes at least the device identifier and an application authentication object that verifies that an application associated therewith is an authentic application issued to an identified user;
- receiving the secure device access token from the identity provider in response to the request, wherein the secure device access token includes the application authentication object and the device identifier;
- transferring from the first network service provided by the wireless telecommunication carrier over the cellular network service connection to a second network service provided by a first secure server over a Wi-Fi network service connection, including disconnecting the cellular network service connection and presenting the secure device access token to the first secure server over the Wi-Fi network service connection without further verification of the application or of the device;
- and
- transferring from the second network service provided by the first secure server over the Wi-Fi network service connection to a third network service provided by a second secure server over a network service connection different from the cellular network service connection and from the Wi-Fi network service connection, including disconnecting from the Wi-Fi network service connection and presenting the secure device access token to the second secure server over the network service connection without further verification of the application or of the device.
4 more elements
One or more non-transitory computer-readable storage media storing computer-executable instructions that, when executed, perform the following operations:
- obtaining, from a cellular network service connection, a device identifier that identifies a device;
- obtaining access by the device to a first network service provided by a wireless telecommunication carrier by way of the cellular network service connection using the device identifier to authenticate the device;
- obtaining an application authentication object that verifies that an application associated therewith is an authentic application issued to an identified user;
- providing the application authentication object to an identity provider;
- providing the device identifier to the identity provider;
- creating a request to the identity provider for a secure device access token, the request including at least the application authentication object and the device identifier;
- transmitting the request to the identity provider;
- receiving a secure device access token from the identity provider in response to the transmitted request,
- transferring from the first network service provided by the wireless telecommunication carrier over the cellular network service connection to a second network service provided by a first secure server over a Wi-Fi network service connection, including disconnecting the cellular network service connection and presenting the secure device access token to the first secure server over the Wi-Fi network service connection without further verification of the application or of the device;
- and
- transferring from the second network service provided by the first secure server over the Wi-Fi network service connection to a third network service provided by a second secure server over a network service connection different from the cellular network service connection and from the Wi-Fi network service connection, including disconnecting from the Wi-Fi network service connection and presenting the secure device access token to the second secure server over the network service connection without further verification of the application or of the device.
8 more elements
Dependencies are inferred from the claim text.