US 9,009,806 B2 · System and method for mobile single sign-on integration

Abstract

Improved methods and systems for integrating client-side single sign-on (SSO) authentication security infrastructure with a mobile authorization protocol are disclosed that provide clients with secured SSO mobile access to third-party services. Embodiments of the present invention leverage SSO authentication protocols that are utilized at many client-side systems already and integrate these SSO authentication protocols with a mobile SSO authorization protocol, thereby effectively extending the SSO framework to mobile service requests of web services at third-party service provider systems. Embodiments of the present invention provide a secure and automated solution which may be implemented in any existing client-side SSO frameworks with minimum cost and time, while providing a lightweight and secure solution that provides users using either native applications or mobile web application to access third-party web services.

Claims26

Dependent claims

A method for providing access to mobile web services provided by a service provider system using a single sign-on (SSO) credential managed by a client-side computer system, the method comprising:

receiving, at the service provider system, an authentication token from the mobile device, the authentication token generated by the client-side computer system upon authenticating the identity of a user at the mobile device using the user's single sign on credential;
selecting, using at least one processor, an authentication protocol from a plurality of supported authentication protocols based on the received authentication token;
processing, at the service provider system, the authentication token to validate the authentication token in accordance with the selected authentication protocol;
generating an authorization access token based on said processing;
providing the authorization access token to the mobile device;
processing a service request received from the mobile device, the service request containing the authorization access token;
processing the authorization access token to validate authority to receive the service request;
and
servicing the service request in response to the step of processing the authorization access token.

6 more elements

A service provider computer system for providing web services to mobile devices using single sign-on (SSO) credentials managed by a client-side computer system, the system comprising:

a web authentication engine for receiving an authentication token generated by the client-side computer system upon authenticating an identity of a user at the mobile device using the user's single sign on credential and processing the authentication token to validate the authentication token based on a selected authentication protocol from a plurality of supported authentication protocols, said authentication protocol selected, using one processor, based on the received authentication token;
a token engine for generating an authorization access token and providing the authorization access token to the mobile device;
a web services engine for processing a service request received from the mobile device, the service request containing the authorization access token, processing the authorization access token to validate authority to receive the service request, and servicing the service request in response to the step of processing the authorization access token.

A method for providing seamless access to mobile web services provided by a service provider system using a single sign-on (SSO) credential managed by a client-side computer system, the method comprising:

receiving, at the service provider system, a request to access web services using the mobile device
redirecting the mobile device, in response to said receiving, to an web-identification authentication service at the client-side computer system to authenticate the identity of the user using the user's single sign on credential, said redirect causing the client-side computer system to generate an authentication token and communicate to the mobile device a message containing the authentication token and a redirect function call that, when processed by a processor at the mobile device, causes the mobile device to automatically communicate the authentication token the service provider system;
receiving an authentication token from the mobile device, the authentication token being generated by the client-side computer system upon authenticating the identity of the user and in accordance with a web SSO protocol;
processing the authentication token to validate the authentication token;
generating an authorization code in response to the step of processing the authentication token;
communicating the authorization code to the mobile device, the authorization code, when processed by a processor at the mobile device, causes the mobile device to communicate the authorization code to the service provider system to request the authorization access token;
receiving the authorization code from the mobile device;
validating the authorization code;
generating the authorization access token in response to validating the authorization code;
and
providing the authorization access token to the mobile device.

8 more elements

Dependencies are inferred from the claim text.

System and method for mobile single sign-on integration

Life of this patent

System and method for mobile single sign-on integration

Life of this patent

Abstract

Claims26