Method and system for secured inter-application communication in mobile devices

• US 9,442,778 B2
• Filed: 09/25/2013
• Issued: 09/13/2016
• Est. Priority Date: 10/01/2012
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Desai, Sachin, Liu, Qingqing, Fischer, Ronald
• Primary Examiner(s): Poltorak, Peter
• Application Number:
  US14/036,106
• Publication Number:
  US 20140095874A1
• Time in Patent Office: 1,084 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 9/54 Interprogram communication
• CPC Class Codes: G06F 9/544 Buffers; Shared memory; Pipes
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04W 12/06 Authentication

Abstract

This disclosure describes a method for accessing network resources which includes receiving by a first application in a mobile computing device sign-in information from a user and enabling the user to sign in to a second application with the first application to access network resources from a resource server based on (a) a first application identification (ID) of the second application, (b) the user authorizing the second application to the resource server, and (c) receiving an authorization grant from the resource server to enable the second application to access the network resources, the mobile computing device coupled with the resource server via a network.

Claims

1. A method for secured inter-application communication, comprising:

requesting, by a first application running on a mobile computing device, that a first socket be opened by an operating system of the mobile computing device, the first socket being associated with the first application;

receiving, by the first application, an identifier of the first socket from the operating system, the identifier being a first port ID associated with the mobile computing device and defining an endpoint of the first socket;

requesting, by the first application, that a second application running on the mobile computing device be provided with the first port ID;

requesting by the second application, in response to receiving the first port ID, that a second socket be opened by the operating system of the mobile computing device, the second socket being associated with the second application;

receiving, by the second application, an identifier of the second socket from the operating system, the identifier being a second port ID associated with the mobile computing device and defining an endpoint of the second socket;

requesting by the second application, in response to receiving the first port ID, that the second socket be coupled to the first socket;

establishing a bi-directional channel via the first and second sockets; and

transferring information from the first application to the second application via the bi-directional channel, the information causing functions of the second application to be made available via an interface of the first application.

2. The method of claim 1, further comprising communicating information about the second socket to the first application.

3. The method of claim 2, further comprising:

transferring information from the second application to the first application using the bi-directional channel, the information from the second application comprising a functionality of the second application that is not included in the first application.

4. The method of claim 3, wherein the transferring information from the second application to the first application comprises:

launching the second application in the foreground on the mobile computing device, thereby transferring control of an event from the first application to the second application;

placing the first application in an event loop until the event is completed; and

returning the first application to the foreground on the mobile computing device in response to the completion of the event.

5. The method of claim 1, wherein the first application is running in the foreground on the mobile computing device and the second application is running in the background, wherein a user can only interact with a mobile application running in the foreground on the mobile device.

6. A computer program product comprising a non-transitory computer readable medium having computer-readable program instructions embodied therein, the computer readable program instructions adapted to be executed by one or more processors to implement a method for secured inter-application communication, the program instructions include:

requesting, by a first application running on a mobile computing device, that a first socket be opened by an operating system of the mobile computing device, the first socket being associated with the first application;

receiving, by the first application, an identifier of the first socket from the operating system, the identifier being a first port ID associated with the mobile computing device and defining an endpoint of the first socket;

requesting, by the first application, that a second application running on the mobile computing device be provided with the first port ID;

requesting, by the second application, in response to receiving the first port ID, that a second socket be opened by the operating system of the mobile computing device, the second socket being associated with the second application;

receiving, by the second application, an identifier of the second socket from the operating system, the identifier being a second port ID associated with the mobile computing device and defining an endpoint of the second socket;

requesting, by the second application, in response to receiving the first port ID, that the second socket be coupled to the first socket;

establishing a bi-directional channel via the first and second sockets; and

transferring information from the first application to the second application via the bi-directional channel, the information causing functions of the second application to be made available via an interface of the first application.

7. The computer program product of claim 6, further comprising communicating information about the second socket to the first application.

8. The computer program product of claim 6, further comprising:

transferring information from the second application to the first application using the bi-directional channel, the information from the second application comprising a functionality of the second application that is not included in the first application.

9. The computer program product of claim 8, wherein the transferring information from the second application to the first application comprises:

launching the second application in the foreground on the mobile computing device, thereby transferring control of an event from the first application to the second application;

placing the first application in an event loop until the event is completed; and

returning the first application to the foreground on the mobile computing device in response to the completion of the event.

10. The computer program product of claim 6, wherein the first application is running in the foreground on the mobile computing device and the second application is running in the background, wherein a user can only interact with a mobile application running in the foreground on the mobile device.