Authentication of handheld devices for access to applications

• US 20060053480A1
• Filed: 09/03/2004
• Published: 03/09/2006
• Est. Priority Date: 09/03/2004
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP AG (SAP SE)
• Inventors: Leblay, Jean-Francois, Lacasse, Martin
• Granted Patent: US 7,404,085 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06Q 20/3674 involving authentication

Abstract

The present invention provides a method and system for communicating via a handheld device to Internet applications such as customer relationship management applications. Automatically generated user information, such as an electronic mail (e-mail) address, containing a certification key is used to authenticate a mobile user'"'"'s access to Internet applications. Access from mobile devices, such as personal data assistants, is possible because no password is required to log in. Other security measures may be used in conjunction with providing user information to ensure access only to authorized users.

Claims

1. A system for authenticating access comprising:

a processor;

a memory coupled to said processor; and

an authentication environment residing in said first memory and executed by said first processor, said authentication environment comprising;

an application to retrieve automatically generated user information received from a handheld device;

a user management engine to retrieve a certification from said automatically generated user information and to determine from said certification whether said user is authorized access; and

a user store to process a query received from said user management engine and retrieve data stored that can be used to identify authorized users.

2. The system of claim 1, further comprising a wireless network that is coupled to said processor and to one or more handheld devices.

3. The system of claim 1, further comprising a handheld mobile data server coupled to said processor via a secured connection to convert signals to and from an information network communications protocol.

4. The system of claim 3, further comprising:

a wireless network coupled to said handheld mobile data server to transmit signals to and from said handheld mobile data server; and

one or more handheld devices coupled to said wireless network to attempt to access said processor.

5. The system of claim 4, further comprising:

a firewall connected to said wireless network and to said handheld mobile data server to protect said processor from electronic attacks.

6. The system of claim 1, further comprising an application database storing a customer relationship management application.

7. The system of claim 1, wherein said automatically generated user information comprises a user electronic mail address.

8. The system of claim 1, wherein said automatically generated user information comprises a user electronic mail address and a personal identification number associated with one of said handheld devices.

9. The system of claim 1, wherein said automatically generated user information comprises a personal identification number or a telephone number.

10. A method for authenticating access, comprising:

parsing an incoming message from a handheld device and retrieving automatically generated user information;

retrieving a certificate from said automatically generated user information to determine whether said user is authorized access;

processing a query received from and retrieving data stored that identifies authorized users; and

authenticating access if said user is authorized.

11. The method of claim 10, wherein said automatically generated user information comprises a user electronic mail address.

12. The method of claim 10, wherein said automatically generated user information comprises a user electronic mail address and a personal identification number associated with said handheld device.

13. The method of claim 10, wherein said automatically generated user information comprises a personal identification number or a telephone number.

14. The method of claim 10, further comprising logging said user onto an Internet application.

15. The method of claim 10, further comprising generating a ticket that will allow a user to remain logged on for a period of time set by an administrator.

16. A computer readable medium storing thereon program instructions that, when executed, cause an executing device to:

parse an incoming message from a handheld device and retrieving automatically generated user information;

retrieve a certificate from said automatically generated user information to determine whether said user is authorized access; and

process a query received from and retrieving data stored about authorized users.

17. The computer readable medium according to claim 16 further comprising instructions that cause the executing device to log said user onto an Internet application.

18. The computer readable medium according to claim 16 wherein said automatically generated user information comprises a user electronic mail address.

19. The computer readable medium according to claim 16 wherein said automatically generated user information comprises a user electronic mail address and a personal identification number associated with said handheld device.

20. The computer readable medium according to claim 16 wherein said automatically generated user information comprises a personal identification number or a telephone number.

21. The computer readable medium according to claim 16 further comprising instructions that cause the executing device to generate a ticket that will allow a user to remain logged on for a period of time set by an administrator.