Multiple data store authentication

• US 10,348,736 B1
• Filed: 01/31/2019
• Issued: 07/09/2019
• Est. Priority Date: 04/21/2005
• Status: Active Grant

• Current Assignee: Seven Networks LLC (FIG LLC (d/b/a Fortress Investment Group LLC))
• Original Assignee: Seven Networks LLC (FIG LLC (d/b/a Fortress Investment Group LLC))
• Inventors: Sutaria, Jay, Gustafson, Brian Daniel, van Gent, Robert Paul, Lin, Ruth, Merriwether, David, Sawhney, Parvinder, Backholm, Ari
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US16/263,035
• Time in Patent Office: 159 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

Systems and methods for authenticating access to multiple data stores substantially in real-time are disclosed. The system may include a server coupled to a network, a client device in communication with the server via the network and a plurality of data stores. The server may authenticate access to the data stores and forward information from those stores to the client device. An exemplary authentication method may include receipt of a request for access to data. Information concerning access to that data is stored and associated with an identifier assigned to a client device. If the identifier is found to correspond to the stored information during a future request for access to the store, access to that store is granted.

Claims

1. A method for provisioning an application for a mobile device, the method comprising:

registering a user at a network server in response to receiving a user request for a service,

wherein the service provides access to data stored in a data store associated with the service, and

wherein the user request for the service includes mobile device information and user information from the mobile device, and

wherein the data stored in the data store associated with the service includes an application for the mobile device;

provisioning the service for the mobile device based on the user information and the mobile device information;

generating a token for authentication based on the user request,

wherein the token for authentication comprises a unique string of data;

sending the token for authentication to the mobile device;

receiving, at the network server, an authentication request from the mobile device,

wherein the authentication request includes the token for authentication that was previously sent to the mobile device;

authenticating the mobile device for the service based on the received token for authentication to provide the service to the mobile device;

using the user information and mobile device information to determine at least partial requirements for operating the application on the mobile device; and

providing the service to the mobile device by sending the application to the mobile device over an IP connection after successfully authenticating the mobile device,

wherein the application is sent in response to a selection of the application made at the mobile device, and

wherein the application is configured for the mobile device based on the at least partial requirements for operating the application.

2. The method of claim 1, wherein the user information includes a username and a password.

3. The method of claim 1, wherein the mobile device information includes a device identifier unique to the mobile device.

4. The method of claim 1, wherein the mobile device information includes a software identifier that identifies a version of software operating on the mobile device.

5. The method of claim 1, wherein the selection of the application made at the mobile device is from a list of available applications sent by the network server to the mobile device, wherein the list of available applications is based on the mobile device information.

6. The method of claim 1, wherein a filtered list of available content is sent to the mobile device.

7. The method of claim 6, wherein the filtered list of available content is filtered based on the mobile device information.

8. The method of claim 6, wherein the filtered list of available content is filtered based on the user information.

9. The method of claim 1, further comprising identifying the mobile device based on the mobile device information.

10. The method of claim 1, wherein the IP connection is maintained by the network server.

11. A network server configured to provision an application for a mobile device, the server comprising:

a memory; and

a processor, the processor configured to;

register a user at the network server in response to receiving a user request for a service,

wherein the service provides access to data stored in a data store associated with the service, and

wherein the user request for the service includes mobile device information and user information from the mobile device, and

wherein the data stored in the data store associated with the service includes an application for the mobile device;

provision the service for the mobile device based on the user information and the mobile device information;

generate a token for authentication based on the user request,

wherein the token for authentication comprises a unique string of data;

send the token for authentication to the mobile device;

receive an authentication request from the mobile device,

wherein the authentication request includes the token for authentication that was previously sent to the mobile device;

authenticate the mobile device for the service based on the received token for authentication to provide the service to the mobile device;

use the user information and mobile device information to determine at least partial requirements for operating the application on the mobile device; and

provide the service to the mobile device by sending the application to the mobile device over an IP connection after successfully authenticating the mobile device,

wherein the application is sent in response to a selection of the application made at the mobile device, and

wherein the application is configured for the mobile device based on the at least partial requirements for operating the application.

12. The network server of claim 11, wherein the user information includes a username and a password.

13. The network server of claim 11, wherein the mobile device information includes a device identifier unique to the mobile device.

14. The network server of claim 11, wherein the mobile device information includes a software identifier that identifies a version of software operating on the mobile device.

15. The network server of claim 11, wherein the selection of the application made at the mobile device is from a list of available applications sent by the network server to the mobile device, wherein the list of available applications is based on the mobile device information.

16. The network server of claim 11, wherein a filtered list of available content is sent to the mobile device.

17. The network server of claim 16, wherein the filtered list of available content is filtered based on the mobile device information.

18. The network server of claim 16, wherein the filtered list of available content is filtered based on the user information.

19. The network server of claim 11, further comprising identifying the mobile device based on the mobile device information.

20. The network server of claim 11, wherein the IP connection is maintained by the network server.