Method and System for Enabling Access to a Web Service Provider Through Login Based Badges Embedded in a Third Party Site

• US 20100071046A1
• Filed: 09/17/2008
• Published: 03/18/2010
• Est. Priority Date: 09/17/2008
• Status: Abandoned Application

• Current Assignee: Oath Inc. (Verizon Communications Inc.)
• Original Assignee: Yahoo! Inc. (Apollo Global Management, Inc.)
• Inventors: Dani, Neelesh, Seethana, Sidharta
• Application Number:
  US12/212,581
• Publication Number:
  US 20100071046A1
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

A system and method which may allow a user to login a web service provider from a third party site without leaking the user'"'"'s login information to the third party site. A service request interceptor may authenticate the third party site to make sure that a service request is from a third party site registered with the web service provider or its associated sites, and then instruct a badging server to send an HTML markup to the third party site to enable a login page of the web service provider to be displayed as a pop up window, outside of the third party site. Before sending the instructions to the badging server, the service request interceptor may check whether the user has already logged in the web service provider, and authenticate a user to make sure that the user is registered with the web service provider. Since the user may interact with the web service provider directly, the third party site may be bypassed and users'"'"' credentials may be better protected.

Claims

1. A method of enabling access to a web service provider from a third party site through a login based badge, wherein the login based badge is embedded in the third party site, the method comprising:

intercepting a service request from the third party site to the web service provider;

authenticating the third party site; and

displaying a login page of the web service provider, wherein the login page is displayed independent of the third party site.

2. The method of claim 1, further comprising:

determining whether a user is interested in the service provided by the web service provider.

3. The method of claim 2, further comprising:

determining that a user is interested in the service provided by the web service provider if the login based badge is clicked on.

4. The method of claim 2, further comprising:

determining that a user is interested in the service provided by the web service provider if the login based badge is typed on.

5. The method of claim 1, wherein the third party site is authenticated through signature verification.

6. The method of claim 5, wherein the signature is generated based on a secret shared between the third party site and the web service provider.

7. The method of claim 1, further comprising:

determining whether a user has already logged into the web service provider, and displaying the login page of the web service provider when the user has not logged in.

8. The method of claim 1, further comprising:

receiving login information of a user at the login page and determining whether the user is a registered user based on the login information.

9. The method of claim 1, further comprising:

displaying a web page of the web service provider.

10. The method of claim 1, wherein the web service provider receives user ratings on services provided by the third party site.

11. The method of claim 10, further comprising:

determining whether a user has already rated the third party site.

12. The method of claim 11, further comprising:

displaying the user'"'"'s ratings if the user has already rated the third party site.

13. The method of claim 1, further comprising:

sending an HTML markup to the third party site to enable displaying of the login page of the web service provider.

14. The method of claim 1, wherein the login page of the web service provider is displayed as a pop-up window.

15. A system for enabling access to a web service provider from a third party site through a login based badge, wherein the login based badge is embedded in the third party site, the system comprising:

a badging server for embedding the login based badge in the third party site; and

a service request interceptor, coupled between the badging server and the web service provider, intercepting a service request from the third party site to the web service provider and authenticating the third party site.

16. The system of claim 15, wherein the badging server sends an HTML markup to the third party site to enable displaying of the login page of the web service provider in response to instructions from the service request interceptor.

17. The system of claim 15, wherein the service request interceptor authenticates the third party site through signature verification.

18. A computer program product comprising a computer-readable medium having instructions which, when performed by a computer, perform a method of enabling access to a web service provider from a third party site through a login based badge, wherein the login based badge is embedded in the third party site, the method comprising:

intercepting a service request from the third party site to the web service provider;

authenticating the third party site; and

displaying a login page of the web service provider, wherein the login page is displayed independent of the third party site.

19. The computer program product of claim 18, wherein the third party site is authenticated through signature verification.

20. The computer program product of claim 18, wherein the method further comprises:

determining whether a user has already logged into the web service provider, and displaying the login page of the web service provider when the user has not logged in.

21. The computer program product of claim 18, wherein the method further comprises:

sending an HTML markup to the third party site to enable displaying of the login page of the web service provider.