US 2026/0149599 A1 · REGISTRATION-BASED APPLICATION AUTHENTICATION

Abstract

Systems, methods, and techniques are directed to application authentication based on registration with an application registration service. In an example, an application frontend registers with the application registration service and receives a registration key. The application frontend provides a proof of possessing the registration key and a credential of application frontend or an associated account to an authentication service. The authentication service determines an authenticity of the application frontend or the account based on the credential and determines a validity of the proof of possession. Responsive to the authentication and validation, the authentication service provides an artifact to application frontend. The application frontend utilizes the artifact to access an application backend and/or a resource thereof. In an embodiment, the artifact is bound to a particular instance of the application frontend in a manner that prevents other instances of the application frontend from utilizing the artifact to access the application backend.

Claims20

Dependent claims

A system comprising:

a server device executing an authentication service, the server device communicatively coupled to a client computing device executing a first instance of an application frontend, the authentication service comprising:
an identity provider that:
receives, from the first instance, a proof code and a credential of a user account,
authenticates the credential of the user account, and
transmits, to the first instance, an authentication artifact comprising the proof code, the authentication artifact indicating the credential of the user account is authenticated;
and
an ownership validator that:
receives the authentication artifact from the first instance,
responsive to determining the proof code is valid, digitally signs the authentication artifact, resulting in a signed authentication artifact, and
transmits the signed authentication artifact to the first instance.

7 more elements

A client computing device associated with a user account, comprising:

a processor;
and
a memory device storing program instructions structured to cause the processor to execute an application frontend to:
generate a proof code from a registration key, the proof code indicating the application backend has access to the registration key,
provide the proof code and a credential of the user account to the identity provider,
subsequent to the identity provider authenticating the credential of the user account, cause an ownership validator to validate the proof code,
receive a validated authentication artifact indicating the proof code is valid and the credential of the user account is authenticated, and
transmit the validated authentication artifact to the application backend.

5 more elements

Dependencies are inferred from the claim text.

Registration-based application authentication

Life of this patent

Registration-based application authentication

Life of this patent

Abstract

Claims20