Bypass login for applications on mobile devices

• US 10,223,758 B2
• Filed: 06/05/2017
• Issued: 03/05/2019
• Est. Priority Date: 03/20/2012
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Alison, Thomas, Berdichevsky, Micha, Eldar, Bosmat Mazal, Pandit, Shashank
• Primary Examiner(s): Hoffman, Brandon S
• Assistant Examiner(s): Woldemariam, Nega
• Application Number:
  US15/614,389
• Publication Number:
  US 20170270619A1
• Time in Patent Office: 638 Days
• Field of Search: 726 4
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/102 Route integrity, e.g. using trusted paths
• CPC Class Codes: H04W 4/21 for social networking applications
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

In one embodiment, a social-networking system authenticates a user of a mobile device, receives a request from the mobile device to install a software application, transmits data to the mobile device comprising the software application and an installation identifier (ID), receives another request including the installation ID from the mobile device to authorize the software application, evaluates the installation ID for validity, and transmits yet another response to the mobile device in accordance with the evaluation.

Claims

1. A method comprising, by a client device of a user:

sending, from the client device to a system of an online social network, a unique identifier (ID) associated with the user;

downloading, to the client device from the system after the system authenticates the unique ID associated with the user, a software application and an installation ID, the software application being operable to access social-networking data associated with the user from the online social network, wherein the installation ID is an indication that the user has been authenticated to the online social network;

sending, from the client device to the system after downloading the software application and the installation ID, a request for authorization to access the social-networking data via the software application, wherein the request comprises the installation ID;

receiving, at the client device from the system, a response to the request, wherein the response comprises an authorization from the online social network to access the social-networking data based on an evaluation of the installation ID; and

executing, by the client device, the software application to access the social-networking data responsive to receiving the authorization from the online social network.

2. The method of claim 1, further comprising, prior to the request for authorization to access the social-networking data,

sending, from the client device to the system, a first request for authorization to install the software application to the client device, the initial request comprising the installation ID.

3. The method of claim 2, further comprising, wherein when the installation ID is determined to be invalid,

receiving, at the client device from the system, a second request to authenticate the user of the client device prior to receiving the response from the system comprising the authorization to access the social-networking data via the software application.

4. The method of claim 3, further comprising, in response to the second request,

sending, from the client device to the system, the unique ID associated with the user.

5. The method of claim 2, wherein when the installation ID is determined to be valid,

receiving, at the client device from the system, the response comprising the authorization from the online social network,

wherein the response comprises an access token that indicates the software application has been authorized by the online social network to access the social-networking data.

6. The method of claim 1, wherein the installation ID comprises a timestamp.

7. The method of claim 6, wherein the timestamp is based on:

a time when the client device sent the unique ID associated with the user to the system, or

a time when the software application was downloaded by the client device.

8. The method of claim 7, further comprising, when it is determined that the timestamp is older than a threshold period of time,

receiving, at the client device from the system, a request to authenticate the user of the client device prior to receiving the response from the system comprising the authorization to access the social-networking data via the software application.

9. The method of claim 8, wherein the threshold period of time is 24 hours.

10. The method of claim 1, wherein the user is associated with the online social network.

11. The method of claim 1, wherein the installation ID is encrypted.

12. The method of claim 11, wherein the installation ID is encrypted using asymmetric key cryptography.

13. The method of claim 11, further comprising:

decrypting the installation ID after downloading, to the client device from the system, the software application and the installation ID; and

storing the decrypted installation ID on the client device.

14. The method of claim 13, further comprising, prior to sending, from the client device to the system, the request for authorization to access the social-networking data via the software application,

encrypting the installation ID to form a second installation ID, and

sending the encrypted second installation ID with the request,

wherein the encrypted second installation ID is different from the encrypted installation ID.

15. The method of claim 1, wherein the software application comprises one or more data files that allow the client device to access a computer application via a network cloud associated with the online social network.

16. The method of claim 1, wherein the software application comprises data that allows the client device to access a web-based computer application via a browser application associated with the online social network.

17. A client device comprising:

one or more processors; and

a memory coupled to the processors comprising instructions executable by the processors, the processors operable when executing the instructions to;

send, from the client device to a system of an online social network, a unique identifier (ID) associated with the user;

download, to the client device from the system after the system authenticates the unique ID associated with the user, a software application and an installation ID, the software application being operable to access social-networking data associated with the user from the online social network, wherein the installation ID is an indication that the user has been authenticated to the online social network;

send, from the client device to the system after downloading the software application and the installation ID, a request for authorization to access the social-networking data via the software application, wherein the request comprises the installation ID;

receive, at the client device from the system, a response to the request, wherein the response comprises an authorization from the online social network to access the social-networking data based on an evaluation of the installation ID; and

execute, by the client device, the software application to access the social-networking data responsive to receiving the authorization from the online social network.

19. The client device of claim 17, wherein the memory further comprises instructions when executed, prior to the request for authorization to access the social-networking data, to send, from the client device to the system, a first request for authorization to install the software application to the client device, the initial request comprising the installation ID.

20. The client device of claim 19, wherein the memory further comprises instructions when executed, when the installation ID is determined to be invalid, to receive, at the client device from the system, a second request to authenticate the user of the client device prior to reception of the response from the system comprising the authorization to access the social-networking data via the software application.

21. The client device of claim 20, wherein the memory further comprises instructions when executed, in response to the second request, to send, from the client device to the system, the unique ID associated with the user.

22. The client device of claim 19, wherein the memory further comprises instructions when executed to, when the installation ID is determined to be valid,

receive, at the client device from the system, the response comprising the authorization from the online social network,

wherein the response comprises an access token that indicates the software application has been authorized by the online social network to access the social-networking data.

23. The client device of claim 17, wherein the installation ID comprises a timestamp.

24. The client device of claim 23, wherein the timestamp is based on:

a time when the client device sent the unique ID associated with the user to the system, or

a time when the software application was downloaded by the client device.

25. The client device of claim 24, wherein the memory further comprises instructions when executed to, when it is determined that the timestamp is older than a threshold period of time, receive, at the client device form the system, a request to authenticate the user of the client device prior to reception of the response from the system comprising the authorization to access the social-networking data via the software application.

26. The client device of claim 25, wherein the threshold period of time is 24 hours.

27. The client device of claim 17, wherein the user is associated with the online social network.

28. The client device of claim 27, wherein the installation ID is encrypted using asymmetric key cryptography.

29. The client device of claim 27, wherein the memory further comprises instructions when executed to:

decrypt the installation ID after downloading, to the client device from the system, the software application and the installation ID; and

store the decrypted installation ID on the client device.

30. The client device of claim 29, wherein the memory further comprises instructions when executed to, prior to sending from the client device to the system, the request for authorization to access the social-networking data via the software application,

encrypt the installation ID to form a second installation ID, and

send the encrypted second installation ID with the request,

wherein the encrypted second installation ID is different from the encrypted installation ID.

31. The client device of claim 17, wherein the software application comprises one or more data files that allow the client device to access a computer application via a network cloud associated with the online social network.

32. The client device of claim 17, wherein the software application comprises data that allows the client device to access a web-based computer application via a browser application associated with the online social network.

18. One or more computer-readable non-transitory storage media embodying software that is operable when executed by a client device to:

send, from the client device to a system of an online social network, a unique identifier (ID) associated with the user;

download, to the client device from the system after the system authenticates the unique ID associated with the user, a software application and an installation ID, the software application being operable to access social-networking data associated with the user from the online social network, wherein the installation ID is an indication that the user has been authenticated to the online social network;

send, from the client device to the system after downloading the software application and the installation ID, a request for authorization to access the social-networking data via the software application, wherein the request comprises the installation ID;

receive, at the client device from the system, a response to the request, wherein the response comprises an authorization from the online social network to access the social-networking data based on an evaluation of the installation ID; and

execute, by the client device, the software application to access the social-networking data responsive to receiving the authorization from the online social network.