Enabling seamless access to a domain of an enterprise

• US 8,677,451 B1
• Filed: 06/22/2010
• Issued: 03/18/2014
• Est. Priority Date: 06/22/2010
• Status: Active Grant

• Current Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Original Assignee: Cellco Partnership, Inc. (Verizon Communications Inc.)
• Inventors: Bhimaraju, Madhu, Zaheeruddin, Syed
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): KAPLAN, BENJAMIN A
• Application Number:
  US12/820,774
• Time in Patent Office: 1,365 Days
• Field of Search: 726/2, 726/7, 726/8
• US Class Current: 726/2
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A user is allowed to access any of a number of domains associated with an enterprise using a credential for any one of the domains. An exemplary method includes steps of receiving, from a user and at a first domain of the enterprise, a user identification and a password; determining, at the first domain, whether the user identification is associated with the first domain; and upon determination that the user identification is not associated with the first domain, determining, at the first domain, whether the user identification is associated with a second domain of the enterprise. The user identification and the password are authenticated at the first domain, upon determination that the user identification is associated with the second domain. Upon successful authentication, the user is enabled to access the second domain of the enterprise. The user identification does not need to include a character directly reflecting a domain name.

Claims

1. A method for enabling a user to access one of a plurality of domains associated with an enterprise, the method performed by a computer and comprising steps of:

receiving, from a user and at a first domain of the enterprise, a user identification and a password;

accessing a unified profile at the first domain to identify a domain name associated with the user identification;

determining, at the first domain, whether the user identification is associated with the first domain;

upon determination that the user identification is not associated with the first domain, determining, at the first domain, whether the user identification is associated with a second domain of the enterprise;

upon determination that the user identification is associated with the second domain, authenticating, at the first domain, the user identification and the password; and

upon successful authentication, enabling the user to access the second domain of the enterprise,

wherein the unified profile includes all the user identifications of the enterprise and their corresponding domains, and

wherein the user identification does not include a character directly reflecting a domain name.

2. The method of claim 1, wherein the user identification includes a telephone number.

3. The method of claim 1, further comprising receiving, from the second domain, updates to the unified profile stored at the first domain, the updates reflecting changes to user identifications associated with the second domain.

4. The method of claim 3, wherein the updates to the unified profile are automatically received from the second domain without an effort from the user.

5. The method of claim 1, further comprising sharing the unified profile with the second domain.

6. The method of claim 1, further comprising:

receiving, from the user, a request to change a user identification associated with the first domain;

requesting, from the user, a new user identification;

receiving, in response to the request, the new user identification;

determining whether the new user identification is registered at the first domain or the second domain; and

upon determining that the new user identification is not registered at the first and second domains, registering the new user identification for the user.

7. The method of claim 1, further comprising:

receiving, from the user, a request to change a user identification associated with the first domain;

requesting, from the user, a new user identification;

receiving, in response to the request, the new user identification;

determining whether the new user identification is registered at the first domain or the second domain; and

upon determining that the new user identification is registered at the first domain or the second domain, informing the user of to select another user identification.

8. The method of claim 7, wherein determining whether the new user identification is registered at the first or second domains includes referencing the unified profile at the first domain to determine whether the new user identification is registered at the first or second domains.

9. The method of claim 1, further comprising not authenticating the user to the first domain,

wherein enabling the user to access the second domain includes redirecting the user from the first domain to the second domain seamlessly.

10. The method of claim 1, wherein the enterprise includes a single enterprise with the first domain associated with a first line of business of the single enterprise and the second domain associated with a second line of business of the single enterprise.

11. A host system for enabling a user to access one of a plurality of domains associated with an enterprise, the host system comprising:

a processing device; and

a memory storing executable instructions configured to cause the processing device to;

receive, from a user and at a first domain of the enterprise, a user identification and a password;

access a unified profile at the first domain to identify a domain name associated with the user identification;

determine, at the first domain, whether the user identification is associated with the first domain;

upon determination that the user identification is not associated with the first domain, determine, at the first domain, whether the user identification is associated with a second domain of the enterprise;

upon determination that the user identification is associated with the second domain, authenticate, at the first domain, the user identification and the password; and

upon successful authentication, enable the user to access the second domain of the enterprise,

wherein the unified profile includes all the user identifications of the enterprise and their corresponding domains, and

wherein the user identification does not include a character directly reflecting a domain name.

12. The host system of claim 11, wherein the user identification includes a telephone number.

13. The host system of claim 11, wherein the memory further stores executable instructions configured to cause the processing device to receive, from the second domain, updates to the unified profile stored at the first domain, the updates reflecting changes to user identifications associated with the second domain.

14. The host system of claim 13, wherein the updates to the unified profile are automatically received from the second domain without an effort from the user.

15. The host system of claim 11, wherein the memory further stores executable instructions configured to cause the processing device to share the unified profile with the second domain.

16. The host system of claim 11, wherein the memory further stores executable instructions configured to cause the processing device to:

receive, from the user, a request to change a user identification associated with the first domain;

request, from the user, a new user identification;

receive, in response to the request, the new user identification;

determine whether the new user identification is registered at the first domain or the second domain; and

upon determining that the new user identification is not registered at the first and second domains, register the new user identification to the user.

17. The host system of claim 11, wherein the memory further stores executable instructions configured to cause the processing device to:

receive, from the user, a request to change a user identification associated with the first domain;

request, from the user, a new user identification;

receive, in response to the request, the new user identification;

determine whether the new user identification is registered at the first domain or the second domain; and

upon determining that the new user identification is registered at the first or the second domain, inform the user of to select another user identification.

18. The host system of claim 17, wherein determining whether the new user identification is registered at the first or second domains includes referencing the unified profile at the first domain to determine whether the new user identification is registered at the first or second domains.

19. The host system of claim 11, wherein:

the memory further stores executable instructions configured to cause the processing device to not authenticate the user to the first domain, and

wherein to enable the user to access the second domain the memory further stores executable instructions for causing the processing device to redirect the user from the first domain to the second domain seamlessly.

20. The host system of claim 11, wherein the enterprise includes a single enterprise with the first domain associated with a first line of business of the single enterprise and the second domain associated with a second line of business of the single enterprise.

21. A host system comprising:

a processing device; and

a memory storing executable instructions configured to cause the processing device to;

accept complete set of valid login credentials of a user for authentication for any of a plurality of domains of an enterprise, independent of which domain the valid login credentials were provided to, each of the plurality of domains having valid login credentials for the user; and

if the accepted valid login credentials do not match the domain to which the valid login credentials were provided, redirect the user to the domain matching the accepted valid login credentials.

22. The host system of claim 21, wherein the plurality of domains are associated with multiple lines of business of a single enterprise.

23. The host system of claim 22, wherein the memory further stores executable instructions configured to cause the processing device to access a unified profile at the domain to which the valid login credentials were provided to identify a domain name associated with the valid login credentials,

wherein the unified profile includes all the login credentials and their corresponding domains of the single enterprise.

24. The host system of claim 21, wherein the memory further stores executable instructions configured to cause the processing device to prevent the user from accessing the domain to which the valid login credentials were provided after redirecting the user to the domain matching the accepted valid login credentials.

25. The host system of claim 21, wherein the memory further stores executable instructions configured to cause the processing device to allow the user to navigate back to the domain to which the valid login credentials were provided without further authentication after redirecting the user to the domain matching the accepted valid login credentials.

26. The host system of claim 21, wherein the complete set of valid credentials includes a username and password.

27. The host system of claim 21, wherein the executable instructions are further configured to cause the processing device to:

determine whether the valid login credentials submitted by the user to the domain to which the valid login credentials were provided are valid for the domain to which the valid login credentials were provided; and

if the valid login credentials are determined not to be valid for the domain to which the valid login credentials were provided, determining whether the valid login credentials are valid for any of the other domains of the enterprise,

wherein the user is redirected to the domain matching the accepted valid login credentials in response to determining that the valid login credentials are valid for another of the other domains of the enterprise.