# US 12,225,378 B2 · Forcing re-authentication of users for accessing online services > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,225,378 B2 - Document ID: US12225378B2 - Status: Granted - Kind: B2 - Application number: 18/586,422 - Filed: 2024-02-24 - Published: 2024-06-13 - Granted: 2025-02-11 - Earliest claimed: 2020-12-29 - Assignees: T-Mobile USA, Inc. - Applicants: T-Mobile USA, Inc. - Inventors: Kanakrai Chauhan - Web page: https://patentgrep.com/patent/US12225378B2 ## CPC - H04W 12/082: using revocation of authorisation - H04W 4/50: Service provisioning or reconfiguring - H04W 4/60: Subscription-based services using application servers or record carriers, e.g. SIM application toolkits - H04W 12/069: using certificates or pre-shared keys - H04W 12/37: Managing security policies for mobile devices or for controlling mobile applications - H04W 4/24: Accounting or billing - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Described herein are techniques for preventing a user from continuing to access an online service once access rights have been revoked. In some embodiments, the techniques comprise receiving a request to determine a current status of access rights in association with a user and an online service, determining, based on one or more conditions associated with the online service, the current status of access rights, upon determining that the current status of access rights indicates that the user is not authorized to access the online service, identifying at least one user device associated with the user, generating programmatic instructions to cause a session token associated with the online service to be removed from a memory of the at least one user device, and providing the programmatic instructions to the at least one user device. ## Claims ### Claim 1 A method, comprising: receiving, at a communication service provider, a request to determine a current status of access rights of a user to access an online service provided by a third-party online service provider based on one or more conditions associated with an account of the user at the communication service provider, wherein the request is received from the third-party online service provider of the online service upon a determination that some predetermined amount of time has passed since a latest request to determine access rights was submitted, and wherein a user device of the user is granted access to the online service of the third-party online service provider via a session token that is generated by the third-party online service provider and stored by the communication service provider with the account of the user at the communication service provider, the session token comprising a string of random characters and being associated with a set of communications between the user device and the third-party online service provider of the online service; determining, at the communication service provider, based on the one or more conditions associated with the account of the user at the communication service provider, the current status of access rights of the user to access the online service provided by the third-party online service provider; and based on determining the current status of access rights of the user to access the online service provided by the third-party online service provider, determining whether to generate and output, to the user device, an instruction to modify the session token associated with the third-party online service provider. ### Claim 2 (depends on 1) The method of claim 1, wherein receiving, at the communication service provider, the request to determine the current status of access rights of the user to access the online service provided by the third-party online service provider based on the one or more conditions associated with the account of the user at the communication service provider comprises: receiving, at the communication service provider and from a mobile application installed on the user device, the request to determine the current status of access rights of the user to access the online service provided by the third-party online service provider based on the one or more conditions associated with the account of the user at the communication service provider. ### Claim 3 (depends on 1) The method of claim 1, wherein receiving, at the communication service provider, the request to determine the current status of access rights of the user to access the online service provided by the third-party online service provider based on the one or more conditions associated with the account of the user at the communication service provider comprises: receiving, at the communication service provider and from the third-party online service provider, the request to determine the current status of access rights of the user to access the online service provided by the third-party online service provider based on the one or more conditions associated with the account of the user at the communication service provider. ### Claim 4 (depends on 1) The method of claim 1, wherein determining whether to generate and output, to the user device, the instruction to modify the session token associated with the third-party online service provider comprises: determining whether to generate and output, to the user device via a data communication channel, the instruction to modify the session token associated with the third-party online service provider. ### Claim 5 (depends on 1) The method of claim 1, wherein modifying the session token associated with the third-party online service provider causes the third-party online service provider to request login credentials from the user device upon an attempt to gain access to the third-party online service using the user device. ### Claim 6 (depends on 1) The method of claim 1, wherein determining whether to generate and output, to the user device, the instruction to modify the session token associated with the third-party online service provider comprises: determining whether to generate and output, to the user device via a software update, the instruction to modify the session token associated with the third-party online service provider. ### Claim 7 (depends on 1) The method of claim 1, wherein determining whether to generate and output, to the user device, the instruction to modify the session token associated with the third-party online service provider comprises: determining whether to generate and output, to the user device via a push message, the instruction to modify the session token associated with the third-party online service provider. ### Claim 8 (depends on 1) The method of claim 1, wherein the session token enables access to the third-party online service without authentication. ### Claim 9 (depends on 1) The method of claim 1, comprising: based on determining the current status of access rights of the user to access the online service provided by the third-party online service provider, determining whether to generate and output, to another user device associated with the user, the instruction to modify the session token associated with the third-party online service provider. ### Claim 10 (depends on 1) The method of claim 1, wherein the one or more conditions associated with the account of the user at the communication service provider comprise an account type of the account of the user, a payment status associated with the account of the user, and usage limits associated with the account of the user. ### Claim 11 (depends on 1) The method of claim 1, wherein determining the current status of access rights of the user to access the online service provided by the third-party online service provider comprises: accessing account information associated with the account of the user at the communication service provider; comparing the one or more conditions associated with the account of the user at the communication service provider to the account information associated with the account of the user at the communication service provider; and determining the current status of access rights of the user to access the online service provided by the third-party online service provider based on comparing the one or more conditions associated with the account of the user at the communication service provider to the account information associated with the account of the user at the communication service provider. ### Claim 12 A computing device, comprising: a processor; and a memory including instructions that, when executed with the processor, cause the computing device to perform the acts comprising: receiving, at a communication service provider, a request to determine a current status of access rights of a user to access an online service provided by a third-party online service provider based on one or more conditions associated with an account of the user at the communication service provider, wherein the request is received from the third-party online service provider of the online service upon a determination that some predetermined amount of time has passed since a latest request to determine access rights was submitted, and wherein a user device of the user is granted access to the online service of the third-party online service provider via a session token that is generated by the third-party online service provider and stored by the communication service provider with the account of the user at the communication service provider, the session token comprising a string of random characters and being associated with a set of communications between the user device and the third-party online service provider of the online service; determining, at the communication service provider, based on the one or more conditions associated with the account of the user at the communication service provider, the current status of access rights of the user to access the online service provided by the third-party online service provider; and based on determining the current status of access rights of the user to access the online service provided by the third-party online service provider, determining whether to generate and output, to the user device, an instruction to modify the session token associated with the third-party online service provider. ### Claim 13 (depends on 12) The computing device of claim 12, wherein receiving, at the communication service provider, the request to determine the current status of access rights of the user to access the online service provided by the third-party online service provider based on the one or more conditions associated with the account of the user at the communication service provider comprises: receiving, at the communication service provider and from a mobile application installed on the user device or from the third-party online service provider, the request to determine the current status of access rights of the user to access the online service provided by the third-party online service provider based on the one or more conditions associated with the account of the user at the communication service provider. ### Claim 14 (depends on 12) The computing device of claim 12, wherein determining whether to generate and output, to the user device, the instruction to modify the session token associated with the third-party online service provider comprises: determining whether to generate and output, to the user device via a data communication channel or via a software update, the instruction to modify the session token associated with the third-party online service provider. ### Claim 15 (depends on 12) The computing device of claim 12, wherein modifying the session token associated with the third-party online service provider causes the third-party online service provider to request login credentials from the user device upon an attempt to gain access to the third-party online service using the user device. ### Claim 16 (depends on 12) The computing device of claim 12, wherein determining whether to generate and output, to the user device, the instruction to modify the session token associated with the third-party online service provider comprises: determining whether to generate and output, to the user device via a push message, the instruction to modify the session token associated with the third-party online service provider. ### Claim 17 (depends on 12) The computing device of claim 12, wherein the acts comprise: based on determining the current status of access rights of the user to access the online service provided by the third-party online service provider, determining whether to generate and output, to another user device associated with the user, the instruction to modify the session token associated with the third-party online service provider. ### Claim 18 (depends on 12) The computing device of claim 12, wherein the one or more conditions associated with the account of the user at the communication service provider comprise an account type of the account of the user, a payment status associated with the account of the user, and usage limits associated with the account of the user. ### Claim 19 (depends on 12) The computing device of claim 12, wherein determining the current status of access rights of the user to access the online service provided by the third-party online service provider comprises: accessing account information associated with the account of the user at the communication service provider; comparing the one or more conditions associated with the account of the user at the communication service provider to the account information associated with the account of the user at the communication service provider; and determining the current status of access rights of the user to access the online service provided by the third-party online service provider based on comparing the one or more conditions associated with the account of the user at the communication service provider to the account information associated with the account of the user at the communication service provider. ### Claim 20 A computer-implemented method comprising: receiving, at a communication service provider, a request to determine a current status of access rights of a user to access an online service provided by a third-party online service provider based on one or more conditions associated with an account of the user at the communication service provider, wherein the request is received from the third-party online service provider of the online service upon a determination that some predetermined amount of time has passed since a latest request to determine access rights was submitted, and wherein a user device of the user is granted access to the online service of the third-party online service provider via a session token that is generated by the third-party online service provider and stored by the communication service provider with the account of the user at the communication service provider, the session token comprising a string of random characters and being associated with a set of communications between the user device and the third-party online service provider of the online service; determining, at the communication service provider, based on the one or more conditions associated with the account of the user at the communication service provider, that the user is authorized to access the online service provided by the third-party online service provider; and based on determining that the user is authorized to access the online service provided by the third-party online service provider, determining, at a communication service provider, to bypass outputting, to the user device, an instruction to modify the session token associated with the third-party online service provider.