US 2008/0178273 A1 · Automated Authentication Process for Application Clients

Abstract

One aspect of the invention defines a process which allows application providers to remotely activate and authenticate logins from an application client. In one implementation, this is achieved through a three step approach. First, the application client notifies the application service of its successful installation (e.g. by accessing a unique URL). Second, it leverages the built-in security features of a mobile network (e.g. security mechanisms of GSM or IMS access security) to securely deliver a message containing authentication information to the application client. Examples of message transports are SMS or SIP with IPsec as specified by IMS. Third, this information is used to authenticate the application client when accessing the remote application service (e.g. via the Internet).

Claims27

Dependent claims

A method for automated authentication of an application client on a mobile communications device comprising:

receiving a notification from a mobile communications device via a mobile transport network, the notification conditioned upon successful installation on the mobile communications device of an application client for an application service;
contacting an authentication server for the mobile transport network to determine a communications address of the mobile communications device;
validating the communications address in a registration database that contains registrations of communications addresses for the application service;
conditioned upon successful validation, storing a unique access key in the registration database in a manner that associates the unique access key with the communications address;
and
sending the unique access key to a message delivery server for the mobile transport network, for delivery to the application client.

3 more elements

An authentication platform for automated authentication of an application client on a mobile communications device comprising:

a registration database that contains registrations of communications addresses for the application service;
and
a security server in communication with the registration database, the security server performing the steps of:
receiving a notification from a mobile communications device via a mobile transport network, the notification conditioned upon successful installation on the mobile communications device of an application client for an application service;
contacting an authentication server for the mobile transport network to determine a communications address of the mobile communications device;
validating the communications address in a registration database;
conditioned upon successful validation, storing a unique access key in the registration database in a manner that associates the unique access key with the communications address;
and
sending the unique access key to a message delivery server for the mobile transport network, for delivery to the application client.

6 more elements

Dependencies are inferred from the claim text.

Automated Authentication Process for Application Clients

Life of this patent

Automated Authentication Process for Application Clients

Life of this patent

Abstract

Claims27