Background authentication refresh
Assigneesalesforce.com, inc.
InventorsOlga Khylkouskaya, Aleksey Kolesnik
Life of this patent
Estimating the term…
Abstract
Techniques for refreshing an authentication token. Access is granted to a secure computing environment in response to receiving authentication information from a requesting computing device. The access is granted for a session and one or more client applications allow secure delegated access to server resources on behalf of a resource owner by utilizing an access token. The access token is refreshed without explicit user interaction utilizing the authentication information for the session while the session is valid. Access is granted to the secure computing environment in response to the refreshed access token.
Claims20
A method comprising:
- granting access to a secure computing environment, with one or more computing devices utilizing a browser application, wherein access is granted in response to an authentication process a result of which an access token is provided by a remote authorization server;
- refreshing the access token, with the one or more computing devices, via a browser extension within a sandbox to provide a secure silent refresh without explicit user interaction utilizing the authentication information for a session during a period of validity for the session by sending at least a portion of authentication information for the session to the remote authorization server to cause the access token to be refreshed;
- granting continued access to the secure computing environment, with the one or more computing devices, utilizing the refreshed access token.
A non-transitory computer readable storage medium having stored thereon instructions that, when executed by one or more processors, cause the one or more processors to:
- grant access to a secure computing environment, with one or more computing devices utilizing a browser application, wherein access is granted in response to an authentication process a result of which an access token is provided by a remote authorization server;
- refresh the access token, with the one or more computing devices via a browser extension within a sandbox to provide a secure silent refresh without explicit user interaction utilizing the authentication information for a session during a period of validity for the session by sending at least a portion of authentication information for the session to the remote authorization server to cause the access token to be refreshed;
- grant continued access to the secure computing environment, with the one or more computing devices, utilizing the refreshed access token.
A system comprising:
- a memory device;
- one or more processors coupled with the memory device, the one or more processors to grant access to a secure computing environment, with one or more computing devices utilizing a browser application, wherein access is granted in response to an authentication process a result of which an access token is provided by a remote authorization server, to refresh the access token, with the one or more computing devices, via a browser extension within a sandbox to provide a secure silent refresh without explicit user interaction utilizing the authentication information for a session during a period of validity for the session by sending at least a portion of authentication information for the session to the remote authorization server to cause the access token to be refreshed, and to grant continued access to the secure computing environment, with the one or more computing devices, utilizing the refreshed access token.
Dependencies are inferred from the claim text.