Switching between restricted-access websites on mobile user devices

• US 9,713,004 B2
• Filed: 11/17/2016
• Issued: 07/18/2017
• Est. Priority Date: 08/22/2014
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: Bovet, Jean Elie
• Primary Examiner(s): Vo, Don N
• Application Number:
  US15/354,853
• Publication Number:
  US 20170070884A1
• Time in Patent Office: 243 Days
• Field of Search: 455411
• CPC Class Codes: G06F 3/04883 for inputting data by handwriting, e.g. gesture or text
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/145 avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session
• CPC Class Codes: H04M 1/72445 for supporting Internet browser applications
• CPC Class Codes: H04M 1/72463 to restrict the functionality of the device
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

A system stores first information, provided by a first user input via a mobile operating system, which enables access to a first restricted access website. The system stores a first screenshot and first data associated with the first restricted access website in response to a first user request, via the mobile operating system, to switch to a second restricted access website. The system stores second information, provided by a second user input via the mobile operating system, which enables access to the second restricted access website. The system stores a second screenshot and second data associated with the second restricted access website in response to a second user input, via the mobile operating system, to switch to the first restricted access website. The system outputs the first screenshot supported by the first data. The system enables access to the first restricted access website based on the stored first information.

Claims

1. An apparatus for switching a mobile user device between applications accessed over a computer network, the apparatus comprising:

a processor; and

one or more stored sequences of instructions which, when executed by the processor, cause the processor to perform operations comprising;

providing authentication information, via the mobile user device, to enable access to an application;

receiving on the mobile user device an authentication key authenticating access to the application;

storing an application page for the application in the mobile user device in response to a user indication, via the mobile user device, to navigate away from the application;

displaying the stored application page on the mobile user device in response to a user indication to navigate back to the application; and

sending the authentication key from the mobile user device to reenable access to the application.

2. The apparatus of claim 1, further comprising one or more stored sequences of instructions which, when executed by the processor, cause the processor to perform operations comprising:

providing second authentication information, via the mobile user device, to enable access to a second application;

receiving on the mobile user device a second authentication key authenticating access to the second application;

storing a second application page for the second application in response to a second user indication, via the mobile user device, to navigate away from the second application.

3. The apparatus of claim 2 further comprising one or more stored sequences of instructions which, when executed by the processor, cause the processor to perform operations comprising:

displaying the second application page on the mobile user device in response to a user indication to navigate back to the second application; and

sending the second authentication key from the mobile user to enable access back to the second application.

4. The apparatus of claim 1 in which the application is located in a cloud-based system.

5. The apparatus of claim 1 in which the user mobile device includes a touchscreen and the apparatus further includes one or more stored sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of detecting the user indication to navigate away from the application and navigate back to the application based on user gestures on the touchscreen.

6. The apparatus of claim 5 in which the user gestures are swipes on the touchscreen.

7. A non-transitory machine-readable medium carrying one or more sequences of instructions for switching between restricted access websites, which instructions, when executed by one or more processors, cause the one or more processors to perform operations comprising:

receiving first access information from a mobile user device enabling access to a first restricted-access application;

granting the mobile user device access to the first restricted-access application based on the first access information;

storing the first access information and sending the mobile user device a first authentication key authenticating access to the first restricted-access application;

detecting the mobile user device exiting the first restrictured-access application and sending second access information enabling access to a second restricted-access application;

granting the mobile user device access to the second restricted-access application based on the second access information;

storing the second access information and sending the mobile user device a second authentication key authenticating access to the second restricted-access application;

detecting the mobile user device existing the second restricted-access application;

receiving the first authentication key and a request from the mobile user device to reaccess the firm, restricted-access application;

using the first authentication key to authenticate the first access information; and

granting the mobile user device access back to the first restricted-access application based on the authentication of the first access information.

8. The non-transitory machine-readable medium of claim 7 further carrying one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to perform operations comprising:

receiving from the mobile user device an indication of switching from an application page of the second restricted-access application to an application page of the first restricted-access application; and

granting the mobile user device access back to the application page of the first restricted-access application based on the indication.

9. The non-transitory machine-readable medium of claim 7 in which the request from the mobile user device to reaccess the first restricted-access application comprises a user gesture on a touchscreen moving back to an application page for the first restricted-access application.

10. The non-transitory machine-readable medium of claim 7 further carrying one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to perform operations comprising:

detecting the mobile user device exiting the first restricted-access application;

receiving the second authentication key and a request to reaccess the second restricted-access application;

using the second authentication key to authenticate the second access information; and

granting the mobile user device access back to the second restricted-access application based on the authentication of the second access information.

11. The non-transitory machine-readable medium of claim 10 in which detecting the mobile user device exiting the first restricted-access application and requesting reaccess to the second restricted-access application comprises an indication from the mobile user device of switching from an application page for the first restricted-access application to an application page for the second restricted-access application.

12. The non-transitory machine-readable medium of claim 11 in which the indication is initiated via a user gesture on a touchscreen moving from the application page for the first restricted-access application to the application page for the second restricted-access application.

13. The non-transitory machine-readable medium of claim 7 wherein the first restricted-access application and the second restricted-access application are both hosted on a same multi-tenant database system.

14. A method for switching between restricted-access applications that are accessed over a computer network, the method comprising:

receiving a request from a mobile user device to access a restricted-access application;

receiving access information from the mobile user device;

granting the mobile user device access to the restricted-access application based on verification of the access information;

storing the access information and sending an authentication key to the mobile user device for authenticating access back to the restricted-access application;

detecting the mobile user device terminating access to the restricted-access application;

receiving the authentication key and a request from the mobile user device to reestablish access back to the restricted-access application;

using the authentication key to authenticate the stored access information; and

granting the mobile user device access back to the restricted-access application based on the authentication of the stored access information.

15. The method of claim 14 wherein the request from the mobile user device to reestablish access back to the restricted-access application is triggered by a user switching to an application page for the restricted-access application.

16. The method of claim 15 wherein the mobile user device switches to the application page based on a touchscreen gesture.

17. The method of claim 14, wherein the restricted-access application is operated in a cloud-based multi-tenant database system.

18. The method of claim 14, further comprising:

receiving a second request from the mobile user device to access a second restricted-access application;

receiving second access information from the mobile user device;

granting the mobile user device access to the second restricted-access application based on verification of the second access information;

storing the second access information and sending a second authentication key to the mobile user device for authenticating access back to the second restricted-access application.

19. The method of claim 18, further comprising:

detecting the mobile user device exiting the second restricted-access application;

receiving the second authentication key and a request from the mobile user device to reestablish access back to the second restricted-access application; and

using the second authentication key to authenticate the stored second access information; and

granting the mobile user device access back to the second restricted-access application based on the authentication of the second access information.

20. The method of claim 14, wherein the access information include a username and password.