Multiple data store authentication

• US 9,769,176 B1
• Filed: 11/28/2016
• Issued: 09/19/2017
• Est. Priority Date: 04/21/2005
• Status: Active Grant

• Current Assignee: Seven Networks LLC (SoftBank Group Corp.)
• Original Assignee: Seven Networks LLC (SoftBank Group Corp.)
• Inventors: Sutaria, Jay, Gustafson, Brian Daniel, van Gent, Robert Paul, Lin, Ruth, Merriwether, David, Sawhney, Parvinder
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US15/362,130
• Time in Patent Office: 295 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

Systems and methods for authenticating access to multiple data stores substantially in real-time are disclosed. The system may include a server coupled to a network, a client device in communication with the server via the network and a plurality of data stores. The server may authenticate access to the data stores and forward information from those stores to the client device. An exemplary authentication method may include receipt of a request for access to data. Information concerning access to that data is stored and associated with an identifier assigned to a client device. If the identifier is found to correspond to the stored information during a future request for access to the store, access to that store is granted.

Claims

1. A server for providing access to one or more data stores, comprising:

a memory and a processor, the server communicatively coupled to a network and the one or more data stores, wherein the server is configured to;

send a first identifier for a client device upon the client device communicating with the server for the client device to present the first identifier in a subsequent connection with the server;

receive registration information for a data store from the client device, wherein a second identifier is generated and associated with the data store and the registration information, wherein the second identifier is send to the client device;

receive, via the subsequent connection with the client device, a request for the client device to receive information from the data store, wherein the subsequent connection includes the first identifier;

configure a service to receive data from the data store on behalf of the client device, wherein the service is based on the second identifier;

receive a first message indicative of new information at the data store;

transmit a second message to the client device in response to receipt of the first message;

wherein additional information associated with the first message is sent from the data store to the client device upon receipt of the second message by the client device.

2. The server of claim 1, wherein the one or more data stores is associated with an electronic mail service provider.

3. The server of claim 1, wherein the client device is one of a cellular telephone, personal digital assistant, or personal computer.

4. The server of claim 1, wherein the first identifier is a token, the token comprising a unique string of data.

5. The server of claim 1, wherein a third identifier is generated for another data store.

6. The server of claim 1, wherein the first identifier is specific to the client device.

7. The server of claim 1, wherein the first message is limited in data size.

8. The server of claim 1, wherein the first message is received when the first message matches a predefined characteristic set by the data store.

9. The server of claim 1, wherein the data store is communicatively coupled to the client device and can transmit to the client device using a connection that is independent of the server.

10. The server of claim 1, wherein the server is configured to direct the client device to delete content thereon in response to an indication that the client device is misappropriated.

11. The server of claim 1, wherein the additional information is sent over a subsequently established connection that is independent of the server.

12. The server of claim 1, wherein the first identifier is generated by the server.

13. The server of claim 1, wherein an IP connection is established between the client device and the data store in response to transmission of the second message to the client device by the server for sending of the additional information.

14. A method for providing access to one or more data stores, comprising:

sending a first identifier for a client device upon the client device communicating with a server for the client device to present the first identifier in a subsequent connection with the server;

receiving registration information for a data store from the client device, wherein a second identifier is generated and associated with the data store and the registration information, wherein the second identifier is send to the client device;

receiving, via the subsequent connection with the client device, a request for the client device to receive information from the data store, wherein the subsequent connection includes the first identifier;

configuring a service to receive data from the data store on behalf of the client device, wherein the service is based on the second identifier;

receiving a first message indicative of new information at the data store;

transmitting a second message to the client device in response to receipt of the first message;

wherein additional information associated with the first message is sent from the data store to the client device upon receipt of the second message by the client device.

15. The method of claim 14, wherein the one or more data stores is associated with an electronic mail service provider.

16. The method of claim 14, wherein the client device is one of a cellular telephone, personal digital assistant, or personal computer.

17. The method of claim 14, wherein the first identifier is a token, the token comprising a unique string of data.

18. The method of claim 14, wherein a third identifier is generated for another data store.

19. The method of claim 14, wherein the first identifier is specific to the client device.

20. The method of claim 14, wherein the first message is limited in data size.

21. The method of claim 14, wherein the first message is received when the first message matches a predefined characteristic set by the data store.

22. The method of claim 14, wherein the data store is communicatively coupled to the client device and can transmit to the client device using a connection that is independent of the server.

23. The method of claim 14, further comprising directing the client device to delete content thereon in response to an indication that the client device is misappropriated.

24. The method of claim 14, wherein the additional information is sent over a subsequently established connection that is independent of the server.

25. The method of claim 14, wherein the first identifier is generated by the server.

26. The method of claim 14, wherein an IP connection is established between the client device and the data store in response to transmission of the second message to the client device by the server for sending the additional information.