Multiple data store authentication

• US 9,912,671 B1
• Filed: 11/28/2016
• Issued: 03/06/2018
• Est. Priority Date: 04/21/2005
• Status: Active Grant

• Current Assignee: Seven Networks LLC (FIG LLC (d/b/a Fortress Investment Group LLC))
• Original Assignee: Seven Networks LLC (FIG LLC (d/b/a Fortress Investment Group LLC))
• Inventors: Backholm, Ari, Sawhney, Parvinder
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US15/362,236
• Time in Patent Office: 463 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

Systems and methods for authenticating access to multiple data stores substantially in real-time are disclosed. The system may include a server coupled to a network, a client device in communication with the server via the network and a plurality of data stores. The server may authenticate access to the data stores and forward information from those stores to the client device. An exemplary authentication method may include receipt of a request for access to data. Information concerning access to that data is stored and associated with an identifier assigned to a client device. If the identifier is found to correspond to the stored information during a future request for access to the store, access to that store is granted.

Claims

1. A server device for authenticating access to one or more data stores, comprising:

a server communication interface;

a processor communicatively coupled to the server communication interface; and

a memory communicatively coupled to the processor, the memory containing instructions executable by the processor whereby the server device is operable to;

receive a first notification message of an update in data at one or more data stores, wherein the first notification message comprises an indication of a presence of new data and does not include all information associated with the new data

determine whether an Internet Protocol connection exists between a mobile device and the server device;

if an Internet Protocol connection exists, generate a second notification message for the mobile device to inform the mobile device of the update in data at the one or more data stores; and

if no Internet Protocol connection exists, cause an Internet Protocol connection manager on the mobile device to open an Internet Protocol connection to the server device to allow a synchronization operation.

2. The server device of claim 1, wherein the server device is further operable to:

receive information from the one or more data stores following authentication of the mobile device.

3. The server device of claim 2, wherein the server device is further operable to:

forward the information received from the one or more data stores to the mobile device.

4. The server device of claim 1, wherein the mobile device is identified based on a client identifier.

5. The server device of claim 4, wherein the client identifier is a token comprising a unique string of data, the token having been previously assigned to the mobile device.

6. The server device of claim 4, wherein the client identifier is at least one of a telephone number and a user name associated with a user of the mobile device.

7. The server device of claim 4, wherein the server device queries an Internet Protocol connection manager to determine whether an Internet Protocol connection exists between the mobile device and the server device, and wherein the Internet Protocol connection manager delivers the second notification message to the mobile device in response to an instruction from the server device.

8. The server device of claim 1, wherein the synchronization operation occurs in real-time or near real time.

9. The server device of claim 1, wherein the first and second notification messages are the same.

10. The server device of claim 3, wherein the information is forwarded in real-time or near real time.

11. The server device of claim 3, wherein the indication of the presence of new data at the one or more data stores is a result of data at the one or more data stores having been filtered, the indication being received only when the filtered data corresponds to a particular configuration of a filter.

12. The server device of claim 1, whereby the server device is further operable to:

authenticate access to specific data stores from the one or more data stores, wherein the specific data stores are those identified by a synchronization profile for the synchronization operation; and

forward data from the specific data stores to the mobile device upon establishment of the Internet Protocol connection.

13. A method for authenticating access to one or more data stores, comprising:

receiving, by a server, a first notification message of an update in data at one or more data stores, wherein the first notification message comprises an indication of a presence of new data and does not include all information associated with the new data;

generating, by the server, a trigger for a mobile device to cause the mobile device to open an Internet Protocol connection with the server; and

utilizing, by the server, the opened Internet Protocol connection to the mobile device to facilitate a synchronization operation in the background of other mobile device operations of the mobile device.

14. The method of claim 13, further comprising forwarding information from the one or more data stores to the mobile device, wherein the forwarded information is at least one of mail, personal information management data and documents.

15. The method of claim 14, wherein forwarding information occurs in real-time or near real time.

16. The method of claim 14, wherein the indication of the presence of new data at the one or more data stores is a result of data at the one or more data stores having been filtered, the indication being received only when the filtered data corresponds to a particular configuration of a filter.

17. The method of claim 13, wherein the trigger is generated for the mobile device upon determining that no Internet Protocol connection exists between the server and the mobile device.

18. A server device for authenticating access to one or more data stores, comprising:

a server communication interface;

a processor communicatively coupled to the server communication interface; and

a memory communicatively coupled to the processor, the memory containing instructions executable by the processor whereby the server device is operable to;

receive a first notification message of an update in data at one or more data stores, wherein the first notification message comprises an indication of a presence of new data and does not include all information associated with the new data;

generate a trigger for a mobile device to cause the mobile device to open an Internet Protocol connection with the server device; and

utilize the opened Internet Protocol connection to the mobile device to facilitate a synchronization operation in the background of other mobile device operations of the mobile device.

19. The server device of claim 18, wherein the server device is further operable to:

receive information from the one or more data stores following authentication of the mobile device.

20. The server device of claim 19, wherein the server device is further operable to:

forward the information received from the one or more data stores to the mobile device.

21. The server device of claim 18, wherein the mobile device is identified based on a client identifier.

22. The server device of claim 21, wherein the client identifier is a token comprising a unique string of data, the token having been previously assigned to the mobile device.

23. The server device of claim 21, wherein the client identifier is at least one of a telephone number and a user name associated with a user of the mobile device.

24. The server device of claim 21, wherein the server device queries an Internet Protocol connection manager to determine whether an Internet Protocol connection exists between the mobile device and the server device, and wherein the Internet Protocol connection manager delivers a second notification message to the mobile device in response to an instruction from the server device.

25. The server device of claim 18, wherein the synchronization operation occurs in real-time or near real time.

26. The server device of claim 24, wherein the first and second notification messages are the same.

27. The server device of claim 20, wherein the information is forwarded in real-time or near real time.

28. The server device of claim 20, wherein the indication of the presence of new data at the one or more data stores is a result of data at the one or more data stores having been filtered, the indication being received only when the filtered data corresponds to a particular configuration of a filter.

29. The server device of claim 18, whereby the server device is further operable to:

authenticate access to specific data stores from the one or more data stores, wherein the specific data stores are those identified by a synchronization profile for the synchronization operation; and

forward data from the specific data stores to the mobile device upon establishment of the Internet Protocol connection.

30. A method for authenticating access to one or more data stores, comprising:

receiving, at a server device, a first notification message of an update in data at one or more data stores, wherein the first notification message comprises an indication of a presence of new data and does not include all information associated with the new data

determining whether an Internet Protocol connection exists between a mobile device and the server device;

if an Internet Protocol connection exists, generating a second notification message for the mobile device to inform the mobile device of the update in data at the one or more data stores; and

if no Internet Protocol connection exists, causing an Internet Protocol connection manager on the mobile device to open an Internet Protocol connection to the server device to allow a synchronization operation.

31. The method of claim 30, further comprising:

receiving information from the one or more data stores following authentication of the mobile device.

32. The method of claim 31, further comprising:

forwarding the information received from the one or more data stores to the mobile device.

33. The method of claim 30, wherein the mobile device is identified based on a client identifier.

34. The method of claim 33, wherein the client identifier is a token comprising a unique string of data, the token having been previously assigned to the mobile device.

35. The method of claim 33, wherein the client identifier is at least one of a telephone number and a user name associated with a user of the mobile device.

36. The method of claim 33, further comprising querying an Internet Protocol connection manager to determine whether an Internet Protocol connection exists between the mobile device and the server device, and delivering the second notification message to the mobile device in response to an instruction from the server device.

37. The method of claim 30, wherein the synchronization operation occurs in real-time or near real time.

38. The method of claim 30, wherein the first and second notification messages are the same.

39. The method of claim 32, wherein the information is forwarded in real-time or near real time.

40. The method of claim 32, wherein the indication of the presence of new data at the one or more data stores is a result of data at the one or more data stores having been filtered, the indication being received only when the filtered data corresponds to a particular configuration of a filter.

41. The method of claim 30, further comprising:

authenticating access to specific data stores from the one or more data stores, wherein the specific data stores are those identified by a synchronization profile for the synchronization operation; and

forwarding data from the specific data stores to the mobile device upon establishment of the Internet Protocol connection.