Method for performing authenticated access to a service on behalf of a user

• US 7,146,404 B2
• Filed: 08/23/2002
• Issued: 12/05/2006
• Est. Priority Date: 08/22/2000
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Colloquis, Inc. (Microsoft Corporation)
• Inventors: Kay, Timothy, Hoffer, Robert
• Primary Examiner(s): Barot, Bharat
• Application Number:
  US10/227,595
• Publication Number:
  US 20030074410A1
• Time in Patent Office: 1,565 Days
• Field of Search: 709201-207, 709225-229, 707 3- 5, 707 9- 10, 715751-752, 715758-759
• US Class Current: 709/206
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 51/04 Real-time or near real-time messaging, e.g. instant messaging [IM]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching

Abstract

A method for using the screen names of users are used to appropriately tailor a service for the users. If the service is a restricted service, then the screen name is used as the basis for deciding whether access should be granted to ensure that access is granted to a limited set of users. Alternatively, if the service is comprised of several component sub-services, and some of those sub-services are restricted, then the screen name is used as the basis for deciding whether access should be granted to the relevant sub-service.

Claims

1. A method for performing authenticated access to a service on behalf of a user comprising the steps of:

authenticating the user by an instant messaging network;

designating a message processor screen-name to a message processor, the screen-name being unique on the instant messaging network;

receiving at the message processor through the instant messaging network a message from the user who is logged on to the instant messaging network using, and a user screen-name uniquely associated with the user;

sending a query from the message processor to the service said query comprising the user screen-name;

wherein the user screen-name is the sole authentication information associated with the user that is sent from the instant message processor to the service.

2. The method of claim 1, wherein the query also comprises a request at least partially derived from the message.

3. The method of claim 1, wherein the service is a sibling service to the instant messaging network.

4. The method of claim 3 wherein the sibling service is a calendar service, a remote file storage service, a stock portfolio service, a headline news service, an address book service, an e-mail service, a voice mail service or a photo sharing service.

5. The method of claim 1 wherein the service is an automated customer service system of an organization and the user is a customer of the organization.

6. The method of claim 5 wherein the organization is a financial services institution that the user has an account with.

7. The method of claim 6 wherein the financial services institution is a bank.

8. The method of claim 7 wherein the user accesses his/her bank account and sends instructions to the bank regarding his/her bank account.

9. The method of claim 6 wherein the financial services institution is an investment institution.

10. The method of claim 9 wherein the user accesses his/her investment account and sends instructions to the investment institution regarding his/her investment account.

11. The method of claim 5 wherein the organization is a telephone service provider, internet service provider or a retailer.

12. The method of claim 1 wherein the message is written in natural language.

13. A system for performing an authenticated access to a service by a user, comprising:

an instant messaging network configured to require authentication and provide a unique user screen-name associated with the user;

a message processor connected to the instant messaging network and the service, said service requiring authenticated access;

wherein the message processor receives a message and the user screen-name from the user, and sends a request that includes the user screen-name to the service, wherein the user screen-name is the sole authentication information associated with the user that is sent from the message processor to the service.

14. The system of claim 13, wherein the query also comprises a request at least partially derived from the message.

15. The system of claim 13, wherein the service is a sibling service to the instant messaging network.

16. The system of claim 15 wherein the sibling service is a calendar service, a remote file storage service, a stock portfolio service, a headline news service, an address book service, an e-mail service, a voice mail service or a photo sharing service.

17. The system of claim 13, wherein the service is an automated customer service system of an organization and the user is a customer of the organization.

18. The system of claim 17, wherein the organization is a financial services institution that the user has an account with.

19. The system of claim 18 wherein the financial services institution is a bank.

20. The system of claim 19 wherein the user accesses his/her bank account and sends instructions to the bank regarding his/her bank account.

21. The system of claim 18 wherein the financial services institution is an investment institution.

22. The system of claim 21 wherein the user accesses his/her investment account and send instructions to the investment institution regarding his/her investment account.

23. The system of claim 17 wherein the organization is a telephone service provider, internet service provider or a retailer.

24. The system of claim 13 wherein the message is written in natural language.