COMMUNICATING INFORMATION BETWEEN APPLICATIONS EXECUTING ON A CLIENT DEVICE VIA AUTHENTICATION INFORMATION GENERATED BY AN APPLICATION

• US 20180181767A1
• Filed: 12/22/2016
• Published: 06/28/2018
• Est. Priority Date: 12/22/2016
• Status: Active Grant

• Current Assignee: VenueNext, Inc. (Shift4 Payments, Inc.)
• Original Assignee: VenueNext, Inc. (Shift4 Payments, Inc.)
• Inventors: Rosenberg, Edan
• Granted Patent: US 10,484,851 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/64 using geofenced areas
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

An application associated with an online system executing on a client device identifies an additional application on the client device with which the application may exchange information. To exchange information between the application and additional application, the online system receives a request for authentication information from the application that identifies the additional application and a user of the application. The online system generates and stores authentication information in association with an identifier associated with the user by the application and with an identifier of the additional application. After communicating the authentication information to the client device, the online system receives a request to verify the authentication information from the additional application. If the authentication information is verified, the online system stores an association between an identifier associated with the user by the additional application that was included in the request and the identifier associated with the user by the application.

Claims

1. A method comprising:

receiving a request for authentication information from an application, the request identifying an additional application and a user of the application;

generating the authentication information in response to the received request;

storing an association between the authentication information and an identifier associated with the user by the application;

communicating the authentication information to the application;

receiving a request to verify the authentication information from the additional application, the request to verify the authentication information including an additional identifier associated with the user by the additional application; and

storing an association between the additional identifier associated with the user by the additional application and the identifier associated with the user by the application in response to verifying the authentication information from the additional application.

2. The method of claim 1, wherein receiving the request for the authentication information from the application comprises:

receiving the request for the authentication information from the application from a client device on which the application is installed having a location within a threshold distance of a location associated with a venue associated with the application.

3. The method of claim 1, wherein receiving the request for the authentication information from the application comprises:

receiving the request for the authentication information from the application from a client device on which the application is installed having a location within a geographic location associated with a venue associated with the application.

4. The method of claim 1, wherein receiving the request for the authentication information from the application comprises:

receiving the request for the authentication information from the application from a client device on which the application is installed that launches the application.

5. The method of claim 1, wherein communicating the authentication information to the application comprises:

generating an obfuscated version of the authentication information; and

communicating the obfuscated version of the authentication information to the application;

6. The method of claim 5, wherein generating the obfuscated version of the authentication information comprises:

applying a hash function to the authentication information.

7. The method of claim 1, wherein the authentication information comprises an access token.

8. The method of claim 1, further comprising:

receiving a request for information associated with the user by the application from the additional application, the request for information including the additional identifier associated with the user by the additional application;

determining the identifier associated with the user by the application from the stored association;

retrieving the information associated with the user by the application based on the identifier associated with the user by the application; and

communicating the information to the additional application.

9. The method of claim 8, wherein communicating the information to the additional application comprises:

encrypting the information; and

communicating the encrypted information to the additional application.

10. The method of claim 1, further comprising:

receiving a request to store information in association with the user from the additional application, the request including the information and including the additional identifier associated with the user by the additional application;

determining the identifier associated with the user by the application from the stored association; and

storing the information included in the request in association with the identifier associated with the user by the application.

11. The method of claim 1, wherein communicating the authentication information to the application comprises:

communicating a link identifying the additional application and including the authentication information, the link including instructions that, when executed by a client device on which the application is installed, launch the additional application and communicate the authentication information to the additional application.

12. A computer program product comprising a computer readable storage medium having instructions encoded therein on that, when executed by a processor included in a client device, cause the processor to:

identify an additional application associated with an application executing on the client device associated with a user;

determine the identified application is installed on the client device;

receive a request for the application and the additional application to exchange information, the request identifying the additional application and an identifier associated with a user by the application;

responsive to receiving the request, communicate a request for authentication information to an online system associated with the application, the request for authentication information identifying the additional application and including an identifier associated with the user by the application;

receive the authentication information from the online system associated with the application;

launch the additional application and communicating the authentication information to the additional application; and

communicate a request to verify the authentication information from the additional application to the server associated with the application, the request to verify the access token including an identifier associated with the user by the additional application.

13. The computer program product of claim 12, wherein identify the additional application associated with the application executing on a client device comprises:

identify an additional application associated with an identifier matching an identifier included in the application in response to the client device launching the application.

14. The computer program product of claim 12, wherein identify the additional application associated with the application executing on a client device comprises:

identify an additional application associated with an identifier matching an identifier included in the application in response to a location of the client being within a threshold distance of a venue associated with the application.

15. The computer program product of claim 12, wherein identify the additional application associated with the application executing on a client device comprises:

identify an additional application associated with an identifier matching an identifier included in the application in response to a location of the client being within a geographic location of a venue associated with the application.

16. The computer program product of claim 12, wherein launch the additional application and communicating the access token from the server to the additional application comprises:

present a link identifying the additional application and including the authentication information to the user, the link including instructions that, when executed by a client device on which the application is installed, launch the additional application and communicate the authentication information to the additional application; and

execute the instructions in the link in response to the user accessing the link.

17. The computer program product of claim 12, wherein receive a request for the application and the additional application to exchange information comprises:

present a prompt to the user to establish a connection between the application and the additional application via the client device, the prompt including a link; and

identify the user accessed the link.