Anticipatory single sign-on (SSO) for proxied web applications

• US 9,621,536 B2
• Filed: 11/12/2014
• Issued: 04/11/2017
• Est. Priority Date: 11/12/2014
• Status: Active Grant

• Current Assignee: Lenovo PC International Limited (Lenovo Group Ltd.)
• Original Assignee: Lenovo Singapore Pte Limited (Lenovo Group Ltd.)
• Inventors: Fardig, Matthew William, Branch, Riley G.
• Primary Examiner(s): LEMMA, SAMSON B
• Application Number:
  US14/539,323
• Publication Number:
  US 20160134618A1
• Time in Patent Office: 881 Days
• Field of Search: 726 8
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54

Abstract

One embodiment provides a method, including: receiving, from an end user device, authentication data of a user of a web service; storing, in a single sign-on service, data for authenticating the user to the web service; receiving, at the single sign-on service, one or more initiations for the web service from the user; generating, using a processor, anticipatory sign-on data for the user based on the one or more initiations for the web service; and storing, at the single sign-on service, the anticipatory sign-on data. Other aspects are described and claimed.

Claims

1. A method, comprising:

receiving, from an end user device, authentication data of a user of a web service;

storing, in a single sign-on service, data for authenticating the user to the web service;

receiving, at the single sign-on service, one or more initiations for the web service from the user;

generating, using a processor, anticipatory sign-on data for the user based on the one or more initiations for the web service; and

storing, at the single sign-on service, the anticipatory sign-on data.

2. The method of claim 1, further comprising:

predicting, using the anticipatory sign-on data, a new initiation for the web service from the end user; and

automatically authenticating the user to the web service prior to receiving the new initiation.

3. The method of claim 2, wherein the automatically authenticating comprises:

retrieving a target web site of the web service; and

providing the data for authenticating the user to the target web site.

4. The method of claim 3, further comprising:

receiving an authenticated web page in response to the authentication; and

transmitting the authenticated web page to the end user device.

5. The method of claim 4, wherein the automatically authenticating occurs prior to receipt of a new initiation.

6. The method of claim 2, wherein:

the anticipatory sign-on data comprises pattern data of user initiations for a web service; and

the predicting is performed using the pattern data.

7. The method of claim 6, wherein the pattern data is time based pattern data.

8. The method of claim 2, wherein:

the anticipatory sign-on data comprises application data; and

the predicting and automatically authenticating are performed for one or more associated applications.

9. The method of claim 2, wherein:

the anticipatory sign-on data comprises user role data; and

the predicting and automatically authenticating are performed for one or more applications according to the user role data.

10. The method of claim 1, wherein the web service is distributed across the end user device and at least one other device.

11. An information handling device, comprising:

a processor; and

a memory device that stores instructions executable by the processor to;

receive, from an end user device, authentication data of a user of a web service;

store, in a single sign-on service, data for authenticating the user to the web service;

receive, at the single sign-on service, one or more initiations for the web service from the user;

generate, using a processor, anticipatory sign-on data for the user based on the one or more initiations for the web service; and

store, at the single sign-on service, the anticipatory sign-on data.

12. The information handling device of claim 11, wherein the instructions are further executable by the processor to:

predict, using the anticipatory sign-on data, a new initiation for the web service from the end user; and

automatically authenticate the user to the web service prior to receiving the new initiation.

13. The information handling device of claim 12, wherein to automatically authenticate comprises:

retrieving a target web site of the web service; and

providing the data for authenticating the user to the target web site.

14. The information handling device of claim 13, wherein the instructions are further executable by the processor to:

receiving an authenticated web page in response to the authentication; and

transmit the authenticated web page to the end user device.

15. The information handling device of claim 14, wherein transmission of the authenticated web page occurs prior to receipt of a new initiation.

16. The information handling device of claim 12, wherein:

the anticipatory sign-on data comprises pattern data of user initiations for a web service; and

the processor predicts a new initiation using the pattern data.

17. The information handling device of claim 16, wherein the pattern data is time based pattern data.

18. The information handling device of claim 12, wherein:

the anticipatory sign-on data comprises application data; and

the processor predicts a new initiation and automatically authenticates the user for one or more associated applications.

19. The information handling device of claim 12, wherein:

the anticipatory sign-on data comprises user role data; and

the processor predicts a new initiation and automatically authenticates the user to one or more applications according to the user role data.

20. A product, comprising:

a storage device having code stored therewith, the code being executable by a processor and comprising;

code that receives, from an end user device, authentication data of a user of a web service;

code that stores, in a single sign-on service, data for authenticating the user to the web service;

code that receives, at the single sign-on service, one or more initiations for the web service from the user;

code that generates, using a processor, anticipatory sign-on data for the user based on the one or more initiations for the web service; and

code that stores, at the single sign-on service, the anticipatory sign-on data.