System and Method for Providing Single Sign On Interface for Applications on Mobile Devices

• US 20150012995A1
• Filed: 07/02/2013
• Published: 01/08/2015
• Est. Priority Date: 07/02/2013
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: KORAT, Mukeshkumar, ALVI, Jamal A., HWANG, Chung-Bun B., KALIANDA, Aarathi, EKNATH, Sivaguru
• Granted Patent: US 9,787,665 B2
• Time in Patent Office: Days
• US Class Current: 726/8
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

A system for and method of providing a mobile device user with a mobile single sign-on (MSSO) platform that can interface with multiple mobile applications on the mobile device. A user having a mobile device may access a mobile application on the mobile device. The mobile application may be enabled to interface with the MSSO platform. The MSSO platform may capture the user credentials sent over a wireless link and provide them to a remote server. The remote server may establish a session over a wireless link with the mobile device based on the user credentials. The MSSO platform may make this session available to other applications on the mobile device seamlessly. The wireless link may be part of a publicly accessible communication network.

Claims

1. A system, comprising:

one or more network-enabled computers, each of the network enabled computers configured to;

receive a first set of data from a mobile device;

perform a first comparison of the first set of data to a first set of stored information;

transmit an authentication signal based on the first comparison;

receive a second set of data from the mobile device;

perform a second comparison of the second set of data to a second set of stored information; and

establish a communication session with the mobile device based on the second comparison.

2. The system of claim 1, wherein the first set of data is associated with a mobile application configured to run on the mobile device.

3. The system of claim 2, wherein the first set of stored information comprises one or more keys, wherein each key has been previously associated with a unique mobile application.

4. The system of claim 1, wherein the authentication signal is transmitted if the first set of data matches the first set of stored information.

5. The system of claim 1, wherein the second set of data comprises one or more credentials associated with a user of the mobile device.

6. The system of claim 5, wherein the second set of stored information comprises a plurality of stored credentials, wherein each of the stored credentials is uniquely associated with a user.

7. The system of claim 6, wherein the communication session is established if at least one of the one or more received user credentials matches at least one of the stored credentials based on the second comparison.

8. The system of claim 1, wherein establishing a communication session comprises transmitting session information to the mobile device.

9. The system of claim 8, wherein the session information comprises at least one of a session cookie and a user profile.

10. The system of claim 8, wherein the session information is an encrypted token.

11. A method comprising:

receiving a first set of data from a mobile device;

comparing the first set of data to a first set of stored information;

transmitting an authentication signal based on the comparison;

receiving a second set of data from the mobile device;

comparing the second set of data to a second set of stored information; and

establishing a communication session with the mobile device based on the comparison.

23. A non-transitory computer readable media comprising code to perform the acts of the method of claim 11.

12. A method comprising:

receiving one or more commands at a mobile device;

starting a program on the mobile device in response to the one or more commands;

transmitting a first set of data to a remote server;

receiving a signal from the remote server in response to the first set of data;

checking a memory on the mobile device to determine whether a first set of information is stored in the memory; and

a) if the first set of information is stored in the memory, providing the first set of information to the remote server;

or

b) if the first set of information is not stored in the memory,

capturing one or more credentials input by a user of the mobile device,

transmitting the one or more credentials to the remote server,

receiving a second set of information from the remote server,

providing the second set of information to the program, and

storing the second set of information in the memory.

13. The method of claim 12, wherein the first set of data is associated with the program.

14. The method of claim 13, wherein the program comprises a mobile application

15. The method of claim 14, wherein the mobile application is configured to perform one or more business-related functions for a business employee

16. The method of claim 12, wherein the first set of information is associated with a session between the mobile device and the remote server that was previously initiated by the user of the mobile device using a different program.

17. The method of claim 16, wherein the first set of information comprises at least one of a session cookie and a profile associated with the user of the mobile device.

18. The method of claim 16, wherein the first set of information comprises an encrypted token.

19. The method of claim 12, wherein the one or more credentials input by the user include at least one of:

a username, a password, or biometric information associated with the user.

20. The method of claim 12, wherein the second set of information is associated with a communication session between the mobile device and the remote server.

21. The method of claim 20, wherein the second set of information comprises at least one of a session cookie and a profile associated with the user of the mobile device.

22. The method of claim 20, wherein the second set of information comprises an encrypted token.

24. A non-transitory computer readable media comprising code to perform the acts of the method of claim 12.