Communicating information between applications executing on a client device via authentication information generated by an application

• US 10,484,851 B2
• Filed: 12/22/2016
• Issued: 11/19/2019
• Est. Priority Date: 12/22/2016
• Status: Active Grant

• Current Assignee: VenueNext, Inc. (Shift4 Payments, Inc.)
• Original Assignee: VenueNext, Inc. (Shift4 Payments, Inc.)
• Inventors: Rosenberg, Edan
• Primary Examiner(s): Cheema, Umar
• Assistant Examiner(s): Tolchinsky, Gregory P
• Application Number:
  US15/389,180
• Publication Number:
  US 20180181767A1
• Time in Patent Office: 1,062 Days
• Field of Search: None
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

An application associated with an online system executing on a client device identifies an additional application on the client device with which the application may exchange information. To exchange information between the application and additional application, the online system receives a request for authentication information from the application that identifies the additional application and a user of the application. The online system generates and stores authentication information in association with an identifier associated with the user by the application and with an identifier of the additional application. After communicating the authentication information to the client device, the online system receives a request to verify the authentication information from the additional application. If the authentication information is verified, the online system stores an association between an identifier associated with the user by the additional application that was included in the request and the identifier associated with the user by the application.

Claims

1. A method comprising:

receiving, at an online system including a processor, a request for authentication information to access the online system from an application executing on a client device, the request identifying an additional application executing on the client device and a user of the application via a user identifier associated with the user by the application, the additional application different from the application;

generating the authentication information in response to the received request;

storing an association between the authentication information and the user identifier associated with the user by the application at the online system;

communicating the authentication information from the online system to the application executing on the client device;

receiving, at the online system, a request to verify the authentication information from the additional application executing on the client device, the request to verify the authentication information including an additional identifier associated with the user by the additional application; and

storing an association between the additional identifier associated with the user by the additional application and the user identifier associated with the user by the application at the online system in response to the online system verifying the authentication information from the additional application.

2. The method of claim 1, wherein receiving, at the online system, the request for the authentication information from the application comprises:

receiving the request for the authentication information from the application from a client device on which the application is installed having a location within a threshold distance of a location associated with a venue associated with the application.

3. The method of claim 1, wherein receiving, at the online system, the request for the authentication information from the application comprises:

receiving the request for the authentication information from the application from a client device on which the application is installed having a location within a geographic location associated with a venue associated with the application.

4. The method of claim 1, wherein receiving, at the online system, the request for the authentication information from the application comprises:

receiving the request for the authentication information from the application from a client device on which the application is installed that launches the application.

5. The method of claim 1, wherein communicating the authentication information from the online system to the application executing on the client device comprises:

generating an obfuscated version of the authentication information; and

communicating the obfuscated version of the authentication information to the application.

6. The method of claim 5, wherein generating the obfuscated version of the authentication information comprises:

applying a hash function to the authentication information.

7. The method of claim 1, wherein the authentication information comprises an access token.

8. The method of claim 1, further comprising:

receiving a request for information associated with the user by the application from the additional application, the request for information including the additional identifier associated with the user by the additional application;

determining the identifier associated with the user by the application from the stored association;

retrieving the information associated with the user by the application based on the user identifier associated with the user by the application; and

communicating the information to the additional application.

9. The method of claim 8, wherein communicating the information to the additional application comprises:

encrypting the information; and

communicating the encrypted information to the additional application.

10. The method of claim 1, further comprising:

receiving a request to store information in association with the user from the additional application, the request including the information and including the additional identifier associated with the user by the additional application;

determining the user identifier associated with the user by the application from the stored association; and

storing the information included in the request in association with the identifier associated with the user by the application.

11. The method of claim 1, wherein communicating the authentication information from the online system to the application executing on the client device comprises:

communicating a link identifying the additional application and including the authentication information, the link including instructions that, when executed by a client device on which the application is installed, launch the additional application and communicate the authentication information to the additional application.

12. A computer program product comprising a non-transitory computer readable storage medium having instructions encoded therein on that, when executed by a processor included in a client device, cause the processor to:

identify an additional application executing on the client device, the additional application associated with an application executing on the client device associated with a user, the additional application different from the application;

determine the identified application is installed on the client device;

receive a request for the application and the additional application to exchange information, the request identifying the additional application and a user identifier associated with the user by the application;

responsive to receiving the request for the application and the additional application to exchange information, communicate a request for authentication information to access an online system associated with the application to the online system associated with the application, the request for authentication information identifying the additional application and identifying the user of the application via the user identifier associated with the user by the application;

receive the authentication information generated by the online system from the online system associated with the application after the online system stores an association between the authentication information and the user identified associated with the user by the application;

launch the additional application and communicate the authentication information to the additional application; and

communicate a request to verify the authentication information from the additional application to the online system associated with the application, the request to verify the authentication information including an additional identifier associated with the user by the additional application, wherein the online system stores an association between the additional identifier associated with the user by the additional application and the user identifier associated with the user by the application at the online system in response to the online system verifying the authentication information from the additional application.

13. The computer program product of claim 12, wherein identify the additional application executing on the client device, the additional application associated with the application executing on the client device comprises:

identify an additional application associated with an identifier matching an identifier included in the application in response to the client device launching the application.

14. The computer program product of claim 12, wherein identify the additional application executing on the client device, the additional application associated with the application executing on the client device comprises:

identify an additional application associated with an identifier matching an identifier included in the application in response to a location of the client being within a threshold distance of a venue associated with the application.

15. The computer program product of claim 12, wherein identify the additional application executing on the client device, the additional application associated with the application executing on the client device comprises:

identify an additional application associated with an identifier matching an identifier included in the application in response to a location of the client being within a geographic location of a venue associated with the application.

16. The computer program product of claim 12, wherein launch the additional application and communicating the authentication information received from the online system to the additional application comprises:

present a link identifying the additional application and including the authentication information to the user, the link including instructions that, when executed by the client device on which the application is installed, launch the additional application and communicate the authentication information to the additional application; and

execute the instructions in the link in response to the user accessing the link.

17. The computer program product of claim 12, wherein receive the request for the application and the additional application to exchange information comprises:

present a prompt to the user to establish a connection between the application and the additional application via the client device, the prompt including a link; and

identify the user accessed the link.