Methods and Systems for a Frictionless Login to a Service

• US 20180232530A1
• Filed: 02/10/2017
• Published: 08/16/2018
• Est. Priority Date: 02/10/2017
• Status: Abandoned Application

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Mak, Calvin Tsun-Lam, Cohen, Ravit, Goldman-Kirst, Ethan, Cheng, Derek Chirk Yin
• Application Number:
  US15/430,267
• Publication Number:
  US 20180232530A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 4/21 for social networking applications

Abstract

Methods, systems, and/or devices for providing a frictionless login experience are described herein. In one aspect, a user is allowed to log into a first service using an account associated with a second service by providing the first service with an identifier, such as an email address or phone number. The second service authenticates the user based on the identifier and other information stored on the user'"'"'s device. Accordingly, the user does not need to enter a password or other confidential information.

Claims

1. A method, comprising:

on a client device having one or more processors and memory storing instructions for execution by the one or more processors;

receiving, in an application, a request to authenticate a user of the application to a first service, wherein the request includes an identifier associated with the user and does not include an authenticating credential;

in response to the request, transmitting the identifier to the first service;

requesting the first service to authenticate the user based on the identifier and data stored on the client device, wherein;

the first service cannot access the data through the application, and

the data is associated with the user and a second service distinct from the first service;

in response to the requesting, receiving a request for the data from the second service and providing the data to the second service; and

in response to providing the data to the second service, receiving, in the application, access to a feature of the first service.

2. The method of claim 1, further comprising, on the client device, after receiving access to the feature of the first service, instructing the first service to send content to the second service.

3. The method of claim 1, wherein the second service is a social networking system.

4. The method of claim 1, wherein:

the application is a browser; and

the data is stored in a cookie on the client device, wherein the cookie is associated with the second service.

5. The method of claim 4, further comprising, in the application on the client device, in response to receiving the request for the data, reading the cookie;

wherein providing the data to the second service comprises providing the data as read from the cookie.

6. The method of claim 5, wherein the cookie is read using an inline frame generated by the second service.

7. The method of claim 1, wherein:

the data stored on the client device is encrypted;

providing the data to the second service comprises providing the encrypted data to the second service;

the second service has access to a key for decrypting the data; and

neither the application nor the first service has access to the key.

8. The method of claim 1, wherein the data comprises two pieces of data.

9. The method of claim 1, wherein the data is different from the identifier associated with the user.

10. The method of claim 1, wherein:

the application is associated with the first service; and

the application does not access the data.

11. The method of claim 10, wherein:

the client device comprises a mobile device;

the application is a first application and is not associated with the second service; and

providing the data comprises;

accessing a second application on the mobile device, wherein the second application is associated with the second service; and

obtaining the data from the second application.

12. The method of claim 11, wherein the data is different from the identifier associated with the user.

13. The method of claim 11, further comprising, on the client device, calling a method on a software developer'"'"'s kit (“

SDK”

) associated with the second service, wherein the SDK performs the transmitting, requesting, accessing, and obtaining.

14. The method of claim 11, wherein:

the second service is a social networking service;

the second application comprises a social networking application.

15. The method of claim 10, wherein the application comprises a game.

16. The method of claim 1, wherein the first service comprises a news service.

17. The method of claim 1, wherein the identifier comprises a phone number.

18. The method of claim 1, wherein the identifier comprises an email address.

19. A client device including one or more processors and memory storing one or more programs configured to be executed by the one or more processors, the one or more programs including instructions for:

receiving, in an application, a request to authenticate a user of the application to a first service, wherein the request includes an identifier associated with the user and does not include an authenticating credential;

in response to the request, transmitting the identifier to the first service;

requesting the first service to authenticate the user based on the identifier and data stored on the client device, wherein;

the first service cannot access the data through the application, and

the data is associated with the user and a second service distinct from the first service;

in response to the requesting, receiving a request for the data from the second service and providing the data to the second service; and

in response to providing the data to the second service, receiving, in the application, access to a feature of the first service.

20. A non-transitory computer readable storage medium storing one or more programs for execution by one or more processors of a client device, the one or more programs including instructions for:

receiving, in an application, a request to authenticate a user of the application to a first service, wherein the request includes an identifier associated with the user and does not include an authenticating credential;

in response to the request, transmitting the identifier to the first service;

requesting the first service to authenticate the user based on the identifier and data stored on the client device, wherein;

the first service cannot access the data through the application, and

the data is associated with the user and a second service distinct from the first service;

in response to the requesting, receiving a request for the data from the second service and providing the data to the second service; and

in response to providing the data to the second service, receiving, in the application, access to a feature of the first service.