SERVICE PROVIDER INVOCATION

• US 20150012991A1
• Filed: 07/16/2014
• Published: 01/08/2015
• Est. Priority Date: 04/15/2004
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Inventors: Cahill, Conor P.
• Granted Patent: US 9,729,543 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 65/1066 Session management
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]

Abstract

A service provider may provide one or more services to and/or for a client. Providing a service may involve receiving a service request including a security token at the service provider and determining whether the security token is valid. Providing the service may also involve determining a session security token if the security token is valid and generating a service response including the session security token. Providing the service may further involve receiving a service request including the session security token, determining whether the session security token is valid, and, if the session security token is valid, generating a second service response.

Claims

1. A method comprising:

maintaining, on a non-transitory storage medium, user information associated with a user account for a service;

receiving, from a user device, a request to authenticate the user device to the service, wherein the request to authenticate the user device to the service comprises verification information;

sending, based on the verification information, authentication information to the user device;

receiving a request, from the user device, to access the service, wherein the request to access the service comprises the authentication information;

authenticating, based on the authentication information, the user device for access to the service; and

providing the user device access to the service.

2. The method as recited in claim 1, further comprising establishing a time period in which the authentication information is valid.

3. The method as recited in claim 2, wherein authenticating the user device comprises determining that the time period is not expired.

4. The method as recited in claim 1, further comprising:

receiving a subsequent request, from the user device, to access the service, wherein the subsequent request to access the service comprises the authentication information;

determining that the authentication information is no longer valid;

checking a validity of the verification information;

sending, in response to determining that the verification information is valid, new authentication information to the user device;

authenticating, based on the new authentication information, the user device for access to the service; and

providing the user device access to the service.

5. The method as recited in claim 1, wherein:

the verification information comprises a username and password; and

the authentication information comprises a token.

6. The method as recited in claim 1, further comprising maintaining, on a non-transitory storage medium, user information associated with a user account for the service that is associated with the user device, wherein the user information comprises one or more of user settings that control at least one aspect of the service, audio data, video data or photograph data.

7. The method as recited in claim 1, wherein the service comprises:

a service infrastructure that manages the access the user device has to the service; and

a service provider that provides the user device with data.

8. The method as recited in claim 7, wherein the service infrastructure is provided by way of a first sever and the service provider is provided by way of a second server.

9. A system comprising:

at least one processor; and

a non-transitory computer readable medium storing instructions that, when executed by the at least one processor, cause the system to;

receive, from a user device, a request to authenticate the user device to a service, wherein the request to authenticate the user device to the service comprises verification information;

send, based on the verification information, authentication information to the user device;

receive a request, from the user device, to access the service, wherein the request to access the service comprises the authentication information;

authenticate, based on the authentication information, the user device for access to the service; and

provide the user device access to the service.

10. The system as recited in claim 9, further comprising instructions that, when executed by the at least one processor, cause the system to establish a time period in which the authentication information is valid.

11. The system as recited in claim 10, wherein the instructions, when executed by the at least one processor, cause the system to authenticate, based on the authentication information, the user device for access to the service by performing steps comprising determining the time period is not expired.

12. The system as recited in claim 11, wherein:

the verification information comprises a username and password; and

the authentication information comprises a token.

13. The system as recited in claim 12, wherein the service comprises:

a service infrastructure that manages the access the user device has to the service; and

a service provider that provides the user device with data, wherein;

the service infrastructure is provided by way of a first sever; and

the service provider is provided by way of a second server.

14. The system as recited in claim 10, further comprising instructions that, when executed by the at least one processor, cause the system to:

determine that the authentication information is no longer valid in response to receiving a subsequent request, from the user device, to access the service that includes the authentication information;

check a validity of the verification information;

send, in response to determining that the verification information is valid, new authentication information to the user device;

authenticate, based on the new authentication information, the user device to the service; and

provide the user device access to the service.

15. A non-transitory computer readable storage medium storing instructions thereon that, when executed by a processor, cause a computer system to:

receive, from a user device, a request to authenticate the user device to a service, wherein the request to authenticate the user device to the service comprises verification information;

send, based on the verification information, authentication information to the user device;

receive a request, from the user device, to access the service, wherein the request to access the service comprises the authentication information;

authenticate, based on the authentication information, the user device for access to the service; and

provide the user device access to the service.

16. The computer readable storage medium as recited in claim 15, further comprising instructions that, when executed by the at least one processor, cause the computer system to establish a time period in which the authentication information is valid.

17. The computer readable storage medium as recited in claim 16, further comprising instructions that, when executed by the at least one processor, cause the computer system to determine that the authentication information is no longer valid by determining the time period is expired.

18. The computer readable storage medium as recited in claim 17, further comprising instructions that, when executed by the at least one processor, cause the computer system to:

check a validity of the verification information in response to receiving a subsequent request from the user device to access the service that includes the authentication information;

send, in response to determining that the verification information is valid, new authentication information to the user device;

authenticate, based on the new authentication information, the user device to the service; and

provide the user device access to the service.

19. The computer readable storage medium as recited in claim 15, wherein:

the verification information comprises a username and password; and

the authentication information comprises a token.

20. The computer readable storage medium as recited in claim 19, wherein the service comprises:

a service infrastructure that manages the access the user device has to the service; and

a service provider that provides the user device with data, wherein;

the service infrastructure is provided by way of a first sever; and

the service provider is provided by way of a second server.