Methods and apparatus for delegated authentication token retrieval
First Claim
1. A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the code comprising code to cause the processor to:
- send, at a first time, from an authorization client on a device to a client authorization module, an indication of a plurality of applications installed on the device, subsequent to intercepting a request to launch at least one application from the plurality of applications such that the application is prevented from receiving the indication;
receive, at a second time after the first time, at the authorization client and in response to the indication, a plurality of application tokens from the client authorization module, each application token from the plurality of application tokens being uniquely associated with an application from the plurality of applications; and
provide, using the authorization client, each application from the plurality of applications its associated application token from the plurality of application tokens such that each application from the plurality of applications is authenticated to an application server associated with that application from the plurality of applications when its associated application token is received at the application server.
10 Assignments
0 Petitions
Accused Products
Abstract
In some embodiments, a non-transitory processor-readable medium includes code to cause a processor to send, from an authorization client on a device to a client authorization module, an indication of multiple applications installed on the device, and receive, at the authorization client and in response to the indication, multiple application tokens from the client authorization module. Each individual application token from the multiple application tokens received by the authorization client is uniquely associated with an application from the multiple applications installed on the device. The authorization client provides each application its associated application token such that each application from the multiple applications can use that application token in order to be authenticated to an application server associated with the application.
59 Citations
20 Claims
-
1. A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the code comprising code to cause the processor to:
-
send, at a first time, from an authorization client on a device to a client authorization module, an indication of a plurality of applications installed on the device, subsequent to intercepting a request to launch at least one application from the plurality of applications such that the application is prevented from receiving the indication; receive, at a second time after the first time, at the authorization client and in response to the indication, a plurality of application tokens from the client authorization module, each application token from the plurality of application tokens being uniquely associated with an application from the plurality of applications; and provide, using the authorization client, each application from the plurality of applications its associated application token from the plurality of application tokens such that each application from the plurality of applications is authenticated to an application server associated with that application from the plurality of applications when its associated application token is received at the application server. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. An apparatus, comprising:
-
an authorization client installed on a device associated with a user, the authorization client configured to send, at a first time, to a client authorization module, an application token request associated with a plurality of applications installed on the device, subsequent to intercepting a request to launch an application from the plurality of applications such that the application is prevented from receiving the indication, the authorization client configured to receive, at a second time after the first time, in response to the application token request, (1) a set of application tokens associated with a first set of applications from the plurality of applications, and (2) an indication that the user associated with the device is unauthorized to use each application from a second set of applications from the plurality of applications and mutually exclusive of the first set of applications, each application token from the set of application tokens being uniquely associated with an application from the first set of applications, the authorization client configured to provide each application from the first set of applications with its associated application token from the set of application tokens such that each application from the first set of applications is authenticated to an application server associated with that application when its associated application token is received at the application server. - View Dependent Claims (8, 9, 10, 11)
-
-
12. An apparatus, comprising:
-
a client authorization module configured to receive, at a first time, from an authorization client at a client device, subsequent to the authorization client intercepting a request to launch at least one application from a plurality of applications installed on the client device such that the at least one application is prevented from receiving the indication, an application token request associated with the plurality of applications, the client authorization module configured to send, at a second time after the first time, in response to the application token request, a plurality of tokens to the authorization client such that the authorization client provides each application from the plurality of applications with a uniquely associated token from the plurality of tokens, the client authorization module configured to receive an authentication request from an application module associated with an application from the plurality of applications, the authentication request including a token from the plurality of tokens and uniquely associated with that application, the client authorization module configured to send an authentication signal to the application module in response to the client authorization module verifying the token as a valid token for the application. - View Dependent Claims (13, 14, 15)
-
-
16. A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the code comprising code to cause the processor to:
-
intercept, at an authorization client on a device and at a first time, an indication that a user associated with the device has requested to launch an application installed on the device such that the application is prevented from receiving the indication; send at a second time after the first time, from the authorization client to a client authorization module and in response to the indication, a request for an application token for the application; receive, at the authorization client and in response to the request, the application token from the client authorization module; associate, using the authorization client, the application token with the application at the device; and send, using the authorization client and after associating the application token with the application, the indication to the application such that the application launches with the application token and in response to the indication. - View Dependent Claims (17, 18, 19)
-
-
20. The non-transitory processor-readable medium of 16, wherein the indication is a first indication, the code to cause the processor to associate includes code to cause the processor to associate at a third time, the code further comprising code to cause the processor to:
-
intercept, at the authorization client and at a fourth time after the third time, a second indication that the user associated with the device has requested to launch the application; determine that the application token is associated with the application at the device; and send the second indication to the application such that the application launches with the application token in response to the second indication.
-
Specification