Back to results
US 12,598,227 B2Granted
Systems and methods for controlling sign-on to web applications
AssigneeNasdaq, Inc.
InventorVladimir Mitevski
Life of this patent
Estimating the term…
Abstract
The described technology provides a single sign-on capability so that a user who is already signed on to a web application from a client application may not be required to sign-on again when he/she later needs access to the web application from the same or another client application. The technology also provides a multiple login prevention capability to detect multiple sign-on events using the same credentials and disable one or more of the associated multiple sessions.
Claims8
A system comprising at least one client device, and at least one server device executing a server-side portion of a web application,
- the at least one client device including a first processing system having at least one hardware processor, the first processing system being configured to execute a browser application providing a first client-side portion of the web application and a non-browser client application providing a second client-side portion of the web application,
- the at least one server including a second processing system having at least one hardware processor, the second processing system being configured to execute the server-side portion of the web application and to perform operations comprising:
- in response to a first access request received from the browser application, causing the browser application to perform generating a first session, wherein the browser application is subsequently provided access to application data using the first session, and wherein the application data is provided by the server-side portion of the web application;
- when a second request is received from the non-browser client application, determining, using an identifier included the second request, whether a value corresponding to the identifier is stored in a memory of the at least one server device in association with at least one of a plurality of session records;
- based on a result of the determining, either providing the non-browser client application with access to the application data using the first session, or
- causing the non-browser client application to perform a sign-on process and generating a second session, wherein the non-browser client application is provided access to the application data using the second session,
- wherein the first processing system is further configured to perform operations comprising:
- determine, by the non-browser client application, one or more candidate browser controls for use by the non-browser client application to communicate with the server-side portion of the web application, wherein each of the one or more candidate browser controls is configured to enable the non-browser client application, which is not a browser, to communicate using protocols including HTTP in accordance with a respective browser type;
- transmitting by the non-browser client application to the server device, a first instance of the second request, wherein the first instance corresponds to a first selected one of the one or more candidate browser controls;
- and
- based upon a response received to the transmitted first instance of the second request, determining, by the non-browser client application, whether to transmit a second instance of the second request, wherein the second instance corresponds to another one of the one or more candidate browser controls.
8 more elements
Dependencies are inferred from the claim text.