Mobile application, resource management advice

• US 10,621,329 B2
• Filed: 04/23/2019
• Issued: 04/14/2020
• Est. Priority Date: 09/29/2011
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Sondhi, Ajay, Chu, Ching-Wen, Kim, Beomsuk
• Primary Examiner(s): Nguyen, Thu Ha T
• Application Number:
  US16/392,398
• Publication Number:
  US 20190251246A1
• Time in Patent Office: 357 Days
• Field of Search: 709217, 709218
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

Techniques for a resource management advice service are provided. In some examples, resource management advice and/or instructions may be provided for use with mobile devices, mobile applications, cloud applications, and/or other web-based applications. For example a mobile client may request to perform one or more resource management operations associated with a service provider. Based at least in part on the requested operation and/or the particular service provider, advice and/or instructions for managing the resource may be provided.

Claims

1. A mobile device, comprising:

a memory device of storing a plurality of instructions; and

one or more computer processors configured to access the memory device and execute the plurality of instructions to at least;

execute, by at least one of the one or more computer processors of the mobile device, a security agent application for communicating with a remote authentication service provider computer;

execute, by the at least one of the one or more computer processors of the mobile device, a first local application that is different from the security application;

receive, by the security agent application of the mobile device that is implemented by the at least one of the one or more computer processors of the mobile device, a request to access a first remote service hosted external to the mobile device, the request provided to the security agent application by the first local application of the mobile device;

provide, by the security agent application of the mobile device, an authentication request to the remote authentication service provider computer;

receive, by the security agent application of the mobile device, a first access token for enabling the first local application to access the first remote service;

provide, by the security agent application of the mobile device, the first access token to the first local application; and

provide, by the security agent application of the mobile device, a second access token for enabling a second local application of the mobile device to access a second remote service hosted external to the mobile device, the second access token provided to the second local application of the mobile device.

2. The system of claim 1, wherein the security agent application is configured to provide single sign-on for at least one of the local application, the local browser application, or other applications of the mobile device.

3. The system of claim 2, wherein the second local application of the mobile device comprises a browser application of the mobile device associated with a web application service provider or a hybrid application of the mobile device configured as a native application with an embedded browser associated with a hybrid application service provider.

4. The system of claim 1, wherein the authentication request is provided to the remote authentication service provider as a representational state transfer (REST) method call.

5. The system of claim 1, wherein the one or more computer processors are further configured to execute the plurality of instructions to determine, based at least in part on a credential included in the authentication request, when a user is authenticated, and wherein the determination is based at least in part on receiving, from a third-party service, an indication that the user is authenticated.

6. A non-transitory computer-readable memory storing a plurality of instructions executable by one or more computer processors of a mobile device, the plurality of instructions, when executed, cause the one or more computer processors to at least:

execute, by at least one of the one or more computer processors of the mobile device, a security agent application for communicating with a remote authentication service provider computer;

execute, by the at least one of the one or more computer processors of the mobile device, a first local application that is different from the security application;

receive, by the security agent application of the mobile device that is implemented by the at least one of the one or more computer processors of the mobile device, a request to access a first remote service hosted external to the mobile device, the request provided to the security agent application by the first local application of the mobile device;

provide, by the security agent application of the mobile device, an authentication request to the remote authentication service provider computer;

receive, by the security agent application of the mobile device, a first access token for enabling the first local application to access the first remote service;

provide, by the security agent application of the mobile device, the first access token to the first local application; and

provide, by the security agent application of the mobile device, a second access token for enabling a second local application of the mobile device to access a second remote service hosted external to the mobile device, the second access token provided to the second local application of the mobile device.

7. The non-transitory computer-readable memory of claim 6, wherein the security agent application of the mobile device is configured to provide single sign-on for the second local application of the mobile device.

8. The non-transitory computer-readable memory of claim 7, wherein the second local application of the mobile device comprises a browser application of the mobile device associated with a web application service provider or a hybrid application of the mobile device configured as a native application with an embedded browser associated with a hybrid application service provider.

9. The non-transitory computer-readable memory of claim 6, wherein the first local application comprises a browser application of the mobile device associated with a web application service provider and the second local application comprises a native application of the mobile device associated with an application service provider.

10. The non-transitory computer-readable memory of claim 6, wherein the first local application comprises a native application of the mobile device associated with an application service provider.

11. The non-transitory computer-readable memory of claim 10, wherein the second local application comprises a browser application of the mobile device associated with a web application service provider.

12. The non-transitory computer-readable memory of claim 10, wherein the second local application comprises a second native application of the mobile device associated with a second application service provider.

13. The non-transitory computer-readable memory of claim 6, wherein the authentication request is provided to the remote authentication service provider as a representational state transfer (REST) method call.

14. The non-transitory computer-readable memory of claim 6, wherein the second token provided to the second local application enables the second local application to log in to an remote application service provider associated with the second local application on behalf of the user without the user providing log-in credentials to log in to the remote application service provider associated with the second local application.

15. A computer-implemented method configured to be executed by one or more computer processors of a mobile device, comprising:

executing, by at least one of the one or more computer processors of the mobile device, a security agent application for communicating with a remote authentication service provider computer;

execute, by the at least one of the one or more computer processors of the mobile device, a first local application that is different from the security application;

receiving, by the security agent application of the mobile device that is implemented by the at least one of the one or more computer processors of the mobile device, a request to access a first remote service hosted external to the mobile device, the request provided to the security agent application by the first local application of the mobile device;

providing, by the security agent application of the mobile device, an authentication request to the remote authentication service provider computer;

receiving, by the security agent application of the mobile device, a first access token for enabling the first local application to access the first remote service;

providing, by the security agent application of the mobile device, the first access token to the first local application; and

providing, by the security agent application of the mobile device, a second access token for enabling a second local application of the mobile device to access a second remote service hosted external to the mobile device, the second access token provided to the second local application of the mobile device.

19. The computer-implemented method of claim 15, further comprising receiving, by the security agent application of the mobile device, the second access token from the remote authentication service provider.

20. The computer-implemented method of claim 15, wherein the second access token is provided to the second local application by the security agent application of the mobile device at least in response to a request from the second local application to access the second remote service.

16. The computer-implemented method of 15, wherein the authentication request is provided to the remote authentication service provider as a representational state transfer (REST) method call.

17. The computer-implemented method of 15, wherein the authentication request is provided to request authentication of a user of the mobile device.

18. The computer-implemented method of claim 17, wherein the first access token is received from the remote authentication service provider based at least in part on authentication of the user.