SINGLE SIGN-ON BETWEEN DEVICE APPLICATION AND BROWSER

• US 20140208407A1
• Filed: 01/19/2013
• Published: 07/24/2014
• Est. Priority Date: 01/19/2013
• Status: Active Application

• Current Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Original Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Inventors: VanBlon, Russell Speight, Estroff, Jeffrey Mark, Holt, Jefferson Logan
• Application Number:
  US13/745,784
• Publication Number:
  US 20140208407A1
• Time in Patent Office: Days
• US Class Current: 726/8
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

An aspect provides a method, including: receiving user credentials at a client application via an input device of an information handling device; creating a token using the user credentials; launching a web browser after receiving input at the client application; providing the token to a remote device; and loading, in response to the remote device authenticating the user based on the token, a secure web site in the web browser for presentation on a display device associated with the information handling device. Other aspects are described and claimed.

Claims

1. A method, comprising:

receiving user credentials at a client application via an input device of an information handling device;

creating a token using the user credentials;

launching a web browser after receiving a user selection at the client application;

providing the token to a remote device; and

loading, in response to the remote device authenticating the user based on the token, a secure web site in the web browser for presentation on a display device associated with the information handling device.

2. The method of claim 1, wherein the step of providing the token to a remote device comprises using the web browser to provide the token to the remote device.

3. The method of claim 2, wherein the token is provided to the web browser as a text string.

4. The method of claim 1, further comprising retrieving the token from a web service resident on the information handling device prior to providing the token to the remote device.

5. The method of claim 1, further comprising validating the token prior to providing the token to the remote device.

6. The method of claim 5, further comprising, responsive to determining the token is not valid, prompting the user for input of the user credentials.

7. The method of claim 6, wherein the user is prompted to input the user credentials to the client application.

8. The method of claim 1, wherein the step of loading a secure web site in the web browser for presentation on a display device associated with the information handling device further comprises loading a re-directed web site received from the remote device.

9. The method of claim 1, wherein the client application and the secure web site have been previously associated.

10. An information handling device, comprising:

an input device;

one or more processors; and

a memory operatively coupled to the one or more processors that stores instructions executable by the one or more processors to perform acts comprising;

receiving user credentials at a client application via an input device of the information handling device;

creating a token using the user credentials;

launching a web browser after receiving a user selection at the client application;

providing the token to a remote device; and

loading, in response to the remote device authenticating the user based on the token, a secure web site in the web browser for presentation on a display device associated with the information handling device.

11. The information handling device of claim 10, wherein the step of providing the token to a remote device comprises using the web browser to provide the token to the remote device.

12. The information handling device of claim 11, wherein the token is provided to the web browser as a text string.

13. The information handling device of claim 10, wherein the acts further comprise retrieving the token from a web service resident on the information handling device prior to providing the token to the remote device.

14. The information handling device of claim 10, wherein the acts further comprise validating the token prior to providing the token to the remote device.

15. The information handling device of claim 14, wherein the acts further comprise, responsive to determining the token is not valid, prompting the user for input of the user credentials.

16. The information handling device of claim 15, wherein the user is prompted to input the user credentials to the client application.

17. The information handling device of claim 10, wherein:

the remote device comprises a web server; and

wherein the step of loading a secure web site in the web browser for presentation on a display device associated with the information handling device further comprises loading a re-directed web site received from the web server.

18. The information handling device of claim 10, wherein the client application and the secure web site have been previously associated.

19. A program product, comprising:

a computer readable storage device having computer program code embodied therewith, the computer program code comprising;

computer program code configured to receive user credentials at a client application via an input device of an information handling device;

computer program code configured to create a token using the user credentials;

computer program code configured to launch a web browser after receiving a user selection at the client application;

computer program code configured to provide the token to a remote device; and

computer program code configured to load, in response to the remote device authenticating the user based on the token, a secure web site in the web browser for presentation on a display device associated with the information handling device.

20. A method, comprising:

receiving, at an information handling device, user credentials input by a user at a client application of a client device, the credentials received in the form of a token derived from the user credentials;

authenticating, in response to a web page request from the client device, the user based on the token;

providing, in response to authenticating the user based on the token, a secure web site to the web browser of the client device for presentation on a display device associated with the client device.

21. The method of claim 20, wherein the step providing a secure web site to the web browser of the client device for presentation on a display device associated with the client device further comprises providing a re-directed web site from the information handling device.