US 11,689,368 B2Granted

Persistent login

AssigneeSynchrony Bank

InventorsShaoyen Chang, William Mahoney, Chidhambaram Mathevan Pillai, Seulkee Park, Jeremy T. Mack, Shahul Shaik, Sathyanarayana Mahendran, Marina Loginova

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

Systems and methods are provided for persistent login. Such persistent login may be based on linking user identity across accounts of different entities to allow each entity to maintain control over their respective sets of user data, while providing a streamlined user experience that avoids much of the repetitive need to login to different services with different login credentials (e.g., during periods of heavy use). Such persistent login may utilize a set of tokens issued and exchanged between devices of the partnering entities. Such tokens may include an access token, refresh token, and identity token. When a user associated with a first entity requests access to information secured by a second entity, such request may be associated with the access token. If the access token is determined to be expired, the refresh token may be used to refresh the access token, which may also trigger issuance of a new refresh token. The refreshed access token may be used in conjunction with the identity token to access the requested information secured by the second entity.

Claims24

Dependent claims

A computer-implemented method comprising:

storing persistent login information in memory regarding a first service associated with login credentials for a first account of a user and a second service associated with different login credentials for a second account of the user, wherein the stored persistent login information includes a set of tokens that includes an access token, an associated refresh token, and an associated identity token;
generating an access request associated with a web application of the first service, wherein the access request includes the access token from the set of tokens and concerns access to the second account associated with the second service, wherein when the access request is received at a device associated with the second service, a determination is made as to whether the access token is valid;
tracking historical data regarding one or more risk factors;
applying artificial intelligence and machine learning to adjust one or more security measures in real-time based on a risk factor pattern detected in the historical data;
accessing data associated with the second account in real-time and in accordance with the one or more adjusted security measures, wherein the data is accessed based on the access token being validated before an end of an expiration period that is adjustable by the second service;
and
populating a display of the web application of the first service with the data accessed in real-time from the second account.

4 more elements

A system comprising:

memory that stores persistent login information regarding a first service associated with login credentials for a first account of a user and a second service associated with different login credentials for a second account of the user, wherein the stored persistent login information includes a set of tokens that includes an access token, an associated refresh token, and an associated identity token;
and
a processor that executes instructions stored in memory, wherein the processor executes the instructions to:
generate an access request associated with a web application of the first service, wherein the access request includes the access token from the set of tokens and concerns access to the second account associated with the second service, wherein when the access request is received at a device associated with the second service, a determination is made as to whether the access token is valid;
track historical data regarding one or more risk factors;
apply artificial intelligence and machine learning to adjust one or more security measures in real-time based on a risk factor pattern detected in the historical data;
access data associated with the second account in real-time and in accordance with the one or more adjusted security measures, wherein the data is accessed based on the access token being validated before an end of an expiration period that is adjustable by the second service;
and
populate a display of the web application of the first service with the data accessed in real-time from the second account.

6 more elements

A non-transitory, computer-readable storage medium, having embodied thereon a program executable by a processor to perform a method comprising:

storing persistent login information in memory regarding a first service associated with login credentials for a first account of a user and a second service associated with different login credentials for a second account of the user, wherein the stored persistent login information includes a set of tokens that includes an access token, an associated refresh token, and an associated identity token;
generating an access request associated with a web application of the first service, wherein the access request includes the access token from the set of tokens and concerns access to the second account associated with the second service, wherein when the access request is received at a device associated with the second service, a determination is made as to whether the access token is valid;
tracking historical data regarding one or more risk factors;
applying artificial intelligence and machine learning to adjust one or more security measures in real-time based on a risk factor pattern detected in the historical data;
accessing data associated with the second account in real-time and in accordance with the one or more adjusted security measures, wherein the data is accessed based on the access token being validated before an end of an expiration period that is adjustable by the second service;
and
populating a display of the web application of the first service with the data accessed in real-time from the second account.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/728,416Filed 25 Apr 2022 · continuation
Priority: 29 Oct 2019
Published: US 2022/0329428 A113 Oct 2022
Granted: 27 Jun 2023
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

H04L 9/3213
Involving a third party or a trusted authority: using tickets or tokens, e.g. Kerberos
H04L 9/088
Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords: usage controlling of secret information,…
H04L 9/3226
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…: using…
H04L 9/3228
Using a predetermined code, e.g. password, passphrase or PIN: one-time or temporary data, i.e. information which is sent for every authentication…

Family

Application62/927,552Us provisional application · filed 29 Oct 2019
Application17/083,692Parent of this continuation · filed 29 Oct 2020
US 2022/0329428 A1Pre-grant publication · published 13 Oct 2022
US 11,349,662 B2Parent of this continuation
US 2021/0126789 A1Published application
US 11,689,368 B2This patent

From the US filing history. Foreign family members aren’t listed.