Multiple data store authentication

• US 10,257,203 B1
• Filed: 09/18/2018
• Issued: 04/09/2019
• Est. Priority Date: 04/21/2005
• Status: Expired due to Fees

• Current Assignee: Seven Networks LLC (SoftBank Group Corp.)
• Original Assignee: Seven Networks LLC (SoftBank Group Corp.)
• Inventors: Sutaria, Jay, Gustafson, Brian Daniel, van Gent, Robert Paul, Lin, Ruth, Merriwether, David, Sawhney, Parvinder, Backholm, Ari
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US16/134,901
• Time in Patent Office: 203 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

Systems and methods for authenticating access to multiple data stores substantially in real-time are disclosed. The system may include a server coupled to a network, a client device in communication with the server via the network and a plurality of data stores. The server may authenticate access to the data stores and forward information from those stores to the client device. An exemplary authentication method may include receipt of a request for access to data. Information concerning access to that data is stored and associated with an identifier assigned to a client device. If the identifier is found to correspond to the stored information during a future request for access to the store, access to that store is granted.

Claims

1. A method for authenticating a user to provide a service, the method comprising:

storing information associated with a user of a first device on a first server, wherein the stored information includes a phone number associated with a second device of the user and is stored during an event;

wherein additional information is needed to authenticate the first device to provide a service to the first device related to data stored in one or more data stores associated with the service;

querying the user for the additional information to authenticate the first device to provide the service to the first device,

wherein authentication of the first device includes delivering a notification message from a second server to the second device, wherein the notification message is related to querying the user for the additional information, and

wherein the second server delivers one or more notification messages related to the service to the second device after authentication of the first device in response to new data being available at the one or more data stores associated with the service;

sending, based on the stored information and the additional information, one or more communications to provide the service to the first device; and

sending one or more communications to provide the service to the second device,

wherein the one or more communications to provide the service to the second device include communications between the second server and the second device that are exchanged through a first connection that is an Internet Protocol (IP) connection maintained by the second device, and

wherein the one or more communications to provide the service to the second device include synchronization communications with the second device that are exchanged through a second connection to synchronize data with the one or more data stores associated with the service, wherein the synchronization communications are initiated in response to the one or more notification messages.

2. The method of claim 1, further comprising terminating the second connection when the second connection is determined to be idle.

3. The method of claim 1, wherein the second server provides connectivity to the second device over the second connection.

4. The method of claim 1, wherein the second server is an intermediary server that provides connectivity to the second device over the second connection.

5. The method of claim 1, wherein the additional information must be provided within a predefined period of time to authenticate the first device.

6. The method of claim 1, further comprising querying the user to verify the phone number associated with the second device provided during the event before sending one or more communications associated with providing the service to the first device.

7. The method of claim 1, wherein the one or more notification messages related to the service are sent to the second device based on message priority such that notification messages with a high priority are sent to the second device by the second server when new data related to the service is available and notification messages with a priority other than high priority are delayed before being sent to the second device by the second server.

8. The method of claim 1, wherein the stored information is stored on the first server according to an assigned identifier that is assigned by the first server.

9. The method of claim 8, wherein the assigned identifier is sent to the second device and used for authenticating the second device to provide the service to the second device.

10. The method of claim 1, further comprising pre-filling information associated with the user, wherein the pre-filled information is previously collected from the user by the first server and stored in a memory of the first server.

11. The method of claim 1, further comprising pre-filling information associated with the user, wherein the pre-filled information is previously collected by the first server from a source other than the user and stored in a memory of the first server.

12. The method of claim 1, wherein the service is a wireless service.

13. The method of claim 1, wherein the service is an application.

14. An apparatus for authenticating a first device to provide a service, the apparatus comprising:

a memory to store information associated with a user of a first device, wherein the stored information includes a phone number associated with a second device of the user and the phone number is stored during an event;

a processor to execute instructions stored in memory, wherein the processor is operable to;

determine additional information is needed to authenticate the first device to provide a service to the first device related to data stored in one or more data stores associated with the service;

authenticate the first device to provide the service to the first device based on the additional information received from the user,

wherein authentication of the first device includes sending a notification message, via an intermediary server, to the second device, wherein the notification message is related to querying the user for the additional information; and

send one or more notification messages related to the service, via the intermediary server, to the second device after authentication of the first device in response to new data being available at the one or more data stores associated with the service;

a connection manager to manage one or more connections for exchanging one or more communications related to the service,

wherein the one or more connections includes a first connection, via the intermediary server, that is an Internet Protocol (IP) connection maintained by the second device, and

wherein the one or more connections includes a second connection for synchronizing data with the one or more data stores associated with the service;

an interface to send, based on the stored information and the additional information, one or more communications to provide the service to the first device; and

an interface to send one or more communications to provide the service to the second device,

wherein the one or more communications to provide the service to the second device include communications exchanged with the second device via the intermediary server over the first connection, and

wherein the one or more communications to provide the service to the second device include synchronization communications exchanged with the second device through the second connection, wherein the synchronization communications are initiated in response to the one or more notification messages.

15. The apparatus of claim 14, wherein managing the one or more connections includes terminating the second connection when the second connection is determined to be idle.

16. The apparatus of claim 14, wherein managing the one or more connections includes providing connectivity to the second device over the second connection.

17. The apparatus of claim 14, wherein managing the one or more connections includes providing connectivity to the second device over the second connection via the intermediary server.

18. The apparatus of claim 14, wherein the additional information must be provided within a predefined period of time to authenticate the first device.

19. The apparatus of claim 14, wherein the processor is further configured to execute instructions stored in memory to verify the phone number associated with the second device provided during the event before sending the one or more communications associated with providing the service to the first device.

20. The apparatus of claim 14, wherein the processor is further configured to execute instructions stored in memory to send the one or more notification messages related to the service to the second device based on message priority such that notification messages with a high priority are sent to the second device by the intermediary server when new data related to the service is available and notification messages with a priority other than high priority are delayed before being sent to the second device by the intermediary server.

21. The apparatus of claim 14, wherein the processor is further configured to execute instructions stored in memory to assign an identifier and store the information in the memory according to the assigned identifier.

22. The apparatus of claim 21, wherein the interface is further configured to send the assigned identifier to the second device and the processor is further configured to execute instructions stored in memory to use the assigned identifier for authenticating the second device to provide the service to the second device.

23. The apparatus of claim 14, wherein the processor is further configured to execute instructions stored in memory to pre-fill information associated with the user, wherein the pre-filled information is previously collected from the user and stored in the memory.

24. The apparatus of claim 14, wherein the processor is further configured to execute instructions stored in memory to pre-fill information associated with the user, wherein the pre-filled information is previously collected from a source other than the user and stored in the memory.

25. The apparatus of claim 14, wherein the service is a wireless service.

26. The apparatus of claim 14, wherein the service is an application.