US 2026/0089149 A1 · SECURE SINGLE SIGN-ON AUTHORIZATION

Abstract

Systems and methods for secure single sign-on authentication are provided. A first opening of an application by a user is detected and an application signature is generated for the application. The user is prompted to verify the application signature. Based on the user verifying the application signature, the application signature is stored as a verified application signature in association with login credentials for the user. When an application that appears to be the first application is later opened, the verified application signature is used to validate the newly opened application. If the signature of the newly opened application does not match the verified signature, this can indicate that the newly opened application is a copycat application or that the first application has been tampered with and thus providing credentials to the newly opened application represents a security risk.

Claims20

Dependent claims

A computer-implemented method for single sign-on, the method comprising:

detecting that a first application has been opened;
generating for the first application, a first application signature;
prompting a user to verify the first application signature;
based on the user verifying the first application signature, storing the first application signature as a verified application signature in association with login credentials for the user;
and
programmatically providing the login credentials to the first application for login.

3 more elements

A non-transitory, computer-readable medium storing thereon a set of computer-executable instructions for single sign-on, the set of computer-executable instructions comprising instructions for:

detecting a first application that has been opened;
generating a first application signature for the first application;
prompting a user to verify the first application signature;
based on the user verifying the first application signature, storing the first application signature as a verified application signature in association with login credentials for the user;
and
programmatically providing the login credentials to the first application for login.

3 more elements

A computer system with single sign-on capability, comprising:

a processor;
a memory storing a plurality of applications, the plurality of application comprising a single sign-on application, wherein the single sign-on application is executable to run as a background process, wherein the single sign-on application comprises instructions for:
detecting a first opening of a first application by a user;
generating a first application signature for the first application;
prompting the user to verify the first application signature;
based on the user verifying the first application signature, storing the first application signature as a verified application signature in association with login credentials for the user;
and
programmatically providing the login credentials associated with the verified application signature to the first application for login.

5 more elements

Dependencies are inferred from the claim text.

Secure single sign-on authorization

Life of this patent

Secure single sign-on authorization

Life of this patent

Abstract

Claims20