Inter-Application Delegated Authentication
AssigneeTwitter, Inc.
InventorsJeffrey Seibert, JR., Michael Ducker
Life of this patent
Estimating the term…
Abstract
Disclosed is a system for delegating authentication of an untrusted application executing on a client device. For delegated authentication, an untrusted application relies on a trusted application executing in the same environment for authentication purposes. The delegated authentication process avoids requiring the user of the untrusted application to provide authentication credentials. The disclosed system for delegating authentication enables any trusted application executing in the same computing environment to authenticate the untrusted application.
Claims21
A method for authenticating an application executing on a client device, the method comprising:
- receiving an authentication request from a first application executing on a client device;
- identifying, at a server remote from the client device, a second application to which authentication of the first application is delegable, the second application being previously authenticated with credentials associated with the client device;
- transmitting an instruction to the first application to continue authentication via the second application;
- and
- authenticating the first application with the credentials associated with the client device based on the first application continuing authentication via the second application.
A computer readable storage medium storing instructions for authenticating an application executing on a client device, the instructions when executed by a processor causes the processor to:
- receive an authentication request from a first application executing on a client device;
- identify, at a server remote to the client device, a second application to which authentication of the first application is delegable, the second application being previously authenticated with credentials associated with the client device;
- transmit an instruction to the first application to continue authentication via the second application;
- and
- authenticate the first application with the credentials associated with the client device based on the first application continuing authentication via the second application.
A computer system, comprising:
- a computer processor;
- and
- an authentication module operating remotely from a client device and configured to execute on the computer processor to:
- receive an authentication request from a first application executing on the client device,
- identify a second application to which authentication of the first application is delegable, the second application being previously authenticated with credentials associated with the client device,
- transmit an instruction to the first application to continue authentication via the second application, and
- authenticate the first application with the credentials associated with the client device based on the first application continuing authentication via the second application.
Dependencies are inferred from the claim text.