Discovery of federated logins

• US 10,419,514 B2
• Filed: 01/21/2016
• Issued: 09/17/2019
• Est. Priority Date: 08/14/2015
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Straub, Christian David, Chugh, Maneesh
• Primary Examiner(s): Pham, Luu T
• Assistant Examiner(s): Cohen, Harvey I
• Application Number:
  US15/002,803
• Publication Number:
  US 20170048252A1
• Time in Patent Office: 1,335 Days
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A system includes download location information in an unprotected Uniform Resource Locator (“URL”), where the download location information identifies a download location for downloading an application provided by a cloud system. The system further includes login server information in the unprotected URL, where the login server information identifies a login server that is configured to be logged in before downloading the application from the download location. Based on the unprotected URL, the application is configured to be downloaded on a mobile device from the download location and after logging into the login server. The application may be developed by accessing a web-based application development server in the cloud system, and after the application is developed, the web-based application development server generates the unprotected URL.

Claims

1. A non-transitory computer readable medium having instructions stored thereon that, when executed by a processor, cause the processor to:

identify a download location for downloading an application provided by a cloud system that comprises a plurality of tenants and a plurality of login servers, where a login server corresponds to each of the tenants;

identify a first login server, corresponding to a first tenant of the plurality of tenants, that is configured to be logged in before downloading the application from the download location;

identify a second login server, corresponding to a second tenant of the plurality of tenants, that is configured to be logged in before downloading the application from the download location;

generate a first unprotected Uniform Resource Locator (URL) that comprises an identity of the download location and an identity of the first login server;

provide the first unprotected URL to a first mobile device, wherein, based on the first unprotected URL, the application is configured to be downloaded on the first mobile device from the download location and after logging into the first login server to authenticate the first mobile device;

generate a second unprotected URL that comprises the identity of the download location and an identity of the second login server;

provide the second unprotected URL to a second mobile device, wherein, based on the second unprotected URL, the application is configured to be downloaded on the second mobile device from the download location and after logging into the second login server to authenticate the second mobile device;

wherein the download location comprises a corresponding first address and the first login server comprises a corresponding second address that is different from the first address and the second login server comprises a corresponding third address that is different from the first address and the second address;

wherein the first mobile device is associated with the first tenant of the plurality of tenants and the second mobile device is associated with the second tenant of the plurality of tenants;

wherein the first login server and second address correspond to only one of the tenants, and the application is available to the plurality of tenants.

2. The computer readable medium of claim 1, wherein the application is developed by accessing a web-based application development server in the cloud system.

3. The computer readable medium of claim 2, wherein, after the application is developed, the web-based application development server generates the first unprotected URL.

4. The computer readable medium of claim 3, wherein the first unprotected URL is shared with one or more devices for downloading the application.

5. The computer readable medium of claim 4, wherein the one or more devices include a non-mobile device, wherein following the first unprotected URL on the non-mobile device opens a web page that includes download information for the application.

6. The computer readable medium of claim 5, wherein the web page includes a Quick Response (QR) code that encodes the application and the identity of the first login server, wherein the application is downloaded to the first mobile device that scans the QR code.

7. The computer readable medium of claim 4, wherein the one or more devices includes the first mobile device, wherein following the first unprotected URL on the first mobile device opens a web page that includes download information for the application.

8. The computer readable medium of claim 7, wherein the web page includes a download button for downloading the application, wherein clicking the download button downloads the application to the first mobile device.

9. The computer readable medium of claim 1, wherein the first unprotected URL is a tokenized URL that includes tokens for at least one of an application link, application login information, application download information, and a mobile backend used by the application.

10. The computer readable medium of claim 1, wherein the application is installed on the first mobile device.

11. The computer readable medium of claim 10, wherein the first mobile device includes a hosting application, wherein the application is installed as a feature of the hosting application.

12. The computer readable medium of claim 11, wherein installing the application is performed by downloading declarative metadata of the application to the first mobile device.

13. A method comprising:

identifying a download location for downloading an application provided by a cloud system that comprises a plurality of tenants and a plurality of login servers, where a login server corresponds to each of the tenants;

identifying a first login server, corresponding to a first tenant of the plurality of tenants, that is configured to be logged in before downloading the application from the download location;

identifying a second login server, corresponding to a second tenant of the plurality of tenants, that is configured to be logged in before downloading the application from the download location;

generating a first unprotected Uniform Resource Locator (URL) that comprises an identity of the download location and an identity of the first login server;

providing the first unprotected URL to a first mobile device, wherein, based on the first unprotected URL, the application is configured to be downloaded on the first mobile device from the download location and after logging into the first login server to authenticate the first mobile device;

generating a second unprotected URL that comprises the identity of the download location and an identity of the second login server;

providing the second unprotected URL to a second mobile device, wherein, based on the second unprotected URL, the application is configured to be downloaded on the second mobile device from the download location and after logging into the second login server to authenticate the second mobile device;

wherein the download location comprises a corresponding first address and the first login server comprises a corresponding second address that is different from the first address and the second login server comprises a corresponding third address that is different from the first address and the second address;

wherein the first mobile device is associated with the first tenant of the plurality of tenants and the second mobile device is associated with the second tenant of the plurality of tenants;

wherein the first login server and second address correspond to only one of the tenants, and the application is available to the plurality of tenants.

14. The method of claim 13, wherein the application is developed by accessing a web-based application development server in the cloud system.

15. The method of claim 14, wherein, after the application is developed, the web-based application development server generates the first unprotected URL.

17. The method of claim 13, wherein the first unprotected URL is shared with one or more devices for downloading the application and the one or more devices include a non-mobile device, wherein following the first unprotected URL on the non-mobile device opens a web page that includes download information for the application and the web page includes a Quick Response (QR) code that encodes the application and the identity of the first login server.

20. The method of claim 13, wherein the first unprotected URL is a tokenized URL that includes tokens for at least one of an application link, application login information, application download information, and a mobile backend used by the application.

16. A cloud based system comprising:

a plurality of login servers a plurality of tenants; and

one or more processors that execute instructions to implement application download functionality comprising;

identifying a download location for downloading an application provided by the cloud based system, where a login server corresponds to each of the tenants;

identifying a first login server, corresponding to a first tenant of the plurality of tenants, that is configured to be logged in before downloading the application from the download location;

identifying a second login server, corresponding to a second tenant of the plurality of tenants, that is configured to be logged in before downloading the application from the download location;

generating a first unprotected Uniform Resource Locator (URL) that comprises an identity of the download location and an identity of the first login server;

providing the first unprotected URL to a first mobile device, wherein, based on the first unprotected URL, the application is configured to be downloaded on the first mobile device from the download location and after logging into the first login server to authenticate the first mobile device;

generating a second unprotected URL that comprises the identity of the download location and an identity of the second login server;

providing the second unprotected URL to a second mobile device, wherein, based on the second unprotected URL, the application is configured to be downloaded on the second mobile device from the download location and after logging into the second login server to authenticate the second mobile device;

wherein the download location comprises a corresponding first address and the first login server comprises a corresponding second address that is different from the first address and the second login server comprises a corresponding third address that is different from the first address and the second address;

wherein the first mobile device is associated with the first tenant of the plurality of tenants and the second mobile device is associated with the second tenant of the plurality of tenants;

wherein the first login server and second address correspond to only one of the tenants, and the application is available to the plurality of tenants.

18. The system of claim 16, wherein the first unprotected URL is shared with one or more devices for downloading the application and the one or more devices include a non-mobile device, wherein following the first unprotected URL on the non-mobile device opens a web page that includes download information for the application and the web page includes a Quick Response (QR) code that encodes the application and the identity of the first login server.

19. The system of claim 16, wherein the application is developed by accessing a web-based application development server in the cloud based system and after the application is developed, the web-based application development server generates the first unprotected URL.