Multiple data store authentication

• US 10,091,211 B1
• Filed: 04/10/2018
• Issued: 10/02/2018
• Est. Priority Date: 04/21/2005
• Status: Expired due to Fees

• Current Assignee: Seven Networks LLC (SoftBank Group Corp.)
• Original Assignee: Seven Networks LLC (SoftBank Group Corp.)
• Inventors: Sutaria, Jay, Gustafson, Brian Daniel, van Gent, Robert Paul, Lin, Ruth, Merriwether, David, Sawhney, Parvinder, Backholm, Ari
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US15/949,617
• Time in Patent Office: 175 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

Systems and methods for authenticating access to multiple data stores substantially in real-time are disclosed. The system may include a server coupled to a network, a client device in communication with the server via the network and a plurality of data stores. The server may authenticate access to the data stores and forward information from those stores to the client device. An exemplary authentication method may include receipt of a request for access to data. Information concerning access to that data is stored and associated with an identifier assigned to a client device. If the identifier is found to correspond to the stored information during a future request for access to the store, access to that store is granted.

Claims

1. A method for authenticating one or more devices to provide a service:

storing, during an event, information associated with a user of a first device on a server, wherein the stored information includes a phone number associated with a second device of the user;

receiving user input indicating whether to use additional information to authenticate the first device to provide the service to the first device,

wherein the service is related to data stored in one or more data stores associated with the service;

querying the user to verify the phone number associated with the second device provided during the event before sending one or more communications to provide the service to the first device;

identifying the first device using an identifier associated with the first device;

storing, after the event, information associated with the first device,

wherein the information associated with the first device includes information related to a previous authentication of the first device;

determining whether additional information is needed to authenticate the first device to provide the service to the first device,

wherein the determination of whether additional information is needed is based on the identifier associated with the first device and a selection by the user related to authentication provided during the previous authentication of the first device;

in response to determining that additional information is needed to authenticate the first device, querying the user for the additional information to authenticate the first device to provide the service to the first device;

in response to determining that additional information is not needed to authenticate the first device, authenticating the first device to provide the service to the first device;

sending the one or more communications to provide the service to the first device; and

sending one or more communications to provide the service to the second device.

2. The method of claim 1, wherein the additional information must be provided within a predefined period of time to be considered valid.

3. The method of claim 1, wherein the identifier associated with the first device is a unique identifier.

4. The method of claim 1, wherein the identifier associated with the first device is a cookie.

5. The method of claim 1, wherein querying the user for the additional information to authenticate the first device includes delivering a message to the second device.

6. The method of claim 1, wherein a second server delivers a notification message related to the service to the second device after authentication of the first device in response to new data being available at the one or more data stores associated with the service.

7. The method of claim 6, wherein the one or more communications to provide the service to the second device include communications between the second server and the second device that are exchanged through a first connection that is an Internet Protocol (IP) connection maintained by the second device.

8. The method of claim 7, wherein the one or more communications to provide the service to the second device include communications with the second device that are exchanged through a second connection to exchange data with the one or more data stores associated with the service, wherein the communications are initiated in response to the notification message.

9. An apparatus for authenticating one or more devices to provide a service, the apparatus comprising:

a memory to store information associated with a user of a first device,

wherein the stored information includes a phone number associated with a second device of the user that is stored during an event, and

wherein the stored information includes information associated with the first device related to a previous authentication of the first device that is stored after the event;

a processor to execute instructions stored in memory, wherein the processor is operable to;

receive user input indicating whether to use additional information to authenticate the first device to provide the service to the first device,

wherein the service is related to data stored in one or more data stores associated with the service;

verify, based on a confirmation received from the user, the phone number associated with the second device provided during the event before sending one or more communications to provide the service to the first device;

identify the first device using an identifier associated with the first device;

determine whether additional information is needed to authenticate the first device to provide the service to the first device,

wherein the determination of whether additional information is needed is based on the identifier associated with the first device and a selection by the user related to authentication provided during the previous authentication of the first device;

in response to determining that additional information is needed to authenticate the first device, authenticate the first device based on the additional information received from the user to provide the service to the first device; and

in response to determining that additional information is not needed to authenticate the first device, authenticate the first device to provide the service to the first device;

an interface to send the one or more communications to provide the service to the first device; and

an interface to send one or more communications to provide the service to the second device.

10. The apparatus of claim 9, wherein the additional information received from the user must be received from the user within a predefined period of time to be considered valid.

11. The apparatus of claim 9, wherein the identifier associated with the first device is a unique identifier.

12. The apparatus of claim 9, wherein the identifier associated with the first device is a cookie.

13. The apparatus of claim 9, further comprising an interface to send a message to the second device requesting the additional information to authenticate the first device from the user.

14. The apparatus of claim 9, further comprising an interface to send a notification message related to the service, via an intermediary server, to the second device after authentication of the first device in response to new data being available at the one or more data stores associated with the service.

15. The apparatus of claim 14, wherein the one or more communications to provide the service to the second device include communications exchanged with the second device via the intermediary server through a first connection that is an Internet Protocol (IP) connection maintained by the second device.

16. The apparatus of claim 15, wherein the one or more communications to provide the service to the second device include communications with the second device that are exchanged through a second connection to exchange data with the one or more data stores associated with the service, wherein the communications are initiated in response to the notification message.

17. A method for authenticating a mobile device to provide a service:

storing, during an event, information associated with a user of the mobile device on a server, wherein the stored information includes a phone number associated with the mobile device of the user;

receiving user input indicating whether to use additional information to authenticate the mobile device to provide the service to the mobile device,

wherein the service is related to data stored in one or more data stores associated with the service;

querying the user to verify the phone number associated with the mobile device provided during the event before sending one or more communications to provide the service to the mobile device;

identifying the mobile device using an identifier associated with the mobile device;

storing, after the event, information associated with the mobile device,

wherein the information associated with the mobile device includes information related to a previous authentication of the mobile device;

determining whether additional information is needed to authenticate the mobile device to provide the service to the mobile device,

wherein the determination of whether additional information is needed is based on the identifier associated with the mobile device and a selection by the user related to authentication provided during the previous authentication of the mobile device;

in response to determining that additional information is needed to authenticate the mobile device, querying the user for the additional information to authenticate the mobile device to provide the service to the mobile device;

in response to determining that additional information is not needed to authenticate the mobile device, authenticating the mobile device to provide the service to the mobile device; and

sending the one or more communications to provide the service to the mobile device.

18. The method of claim 17, wherein the additional information must be provided within a predefined period of time to be considered valid.

19. The method of claim 17, wherein the identifier associated with the mobile device is a unique identifier.

20. The method of claim 17, wherein the identifier associated with the mobile device is a cookie.

21. The method of claim 17, wherein querying the user for the additional information to authenticate the mobile device includes delivering a message to the mobile device.

22. The method of claim 17, wherein a second server delivers a notification message related to the service to the mobile device after authentication of the mobile device in response to new data being available at the one or more data stores associated with the service.

23. The method of claim 22, wherein the one or more communications to provide the service to the mobile device include communications between the second server and the mobile device that are exchanged through a first connection that is an Internet Protocol (IP) connection maintained by the mobile device.

24. The method of claim 23, wherein the one or more communications to provide the service to the mobile device include communications with the mobile device that are exchanged through a second connection to exchange data with the one or more data stores associated with the service, wherein the communications are initiated in response to the notification message.