Premium services authentication
View Patent ↗Methods, systems, and computer-readable media are provided for a processing an application-authentication request originating from a mobile device. In particular, an application-authentication request comprises user information that is analyzed by an authentication server. The authentication server generates a call to a subscription profile server to validate the user information as belonging to a user profile that is in good standing. In response to determining that the application-authentication request is valid, the authentication server generates an authentication cookie that is provided to the mobile device. Accordingly, the authentication cookie is used by the mobile device to access applications, such as premium services.
1. A non-transitory computer-readable storage media (“media”) having computer-executable instructions embodied thereon that, when executed, facilitate a method of processing an application-authentication request originating from a mobile device, the method comprising:
receiving, at a session manager, an application-authentication request from a mobile device, wherein the application-authentication request comprises encrypted user information encrypted using an application key associated with the application-authentication request;
providing the application-authentication request to an authentication server;
receiving an authentication cookie and a mapping of the authentication cookie from the authentication server, wherein the authentication cookie is generated at the authentication server based on the authentication server decrypting the user information using the application key associated with the application-authentication request and receiving validation of the user information from a subscriber profile server;
storing the mapping of the authentication cookie in association with an Internet Protocol (IP) address of the application-authentication request;
providing the authentication cookie to the mobile device;
receiving an application request from the mobile device, wherein the application request comprises the authentication cookie;
determining that the authentication cookie and an IP address of the application request matches the authentication cookie that has its mapping stored in association with the IP address of the application-authentication request; and
providing the application request to an application gateway to process the application request.
2. The media of claim 1 , wherein the application gateway is a Media Access Gateway (MAG).
3. The media of claim 1 , wherein the application gateway is a Video Optimization Gateway (VOG).
4. The media of claim 1 , further comprising:
querying a ban list of the session manager to determine whether a portion of the user information is listed on the ban list; and
determining no portion of the user information appears on the ban list of the session manager.
5. A non-transitory computer-readable storage media (“media”) having computer-executable instructions embodied thereon that, when executed, facilitate a method of processing an application-authentication request originating from a mobile device, the method comprising:
receiving an application-authentication request from a mobile device, wherein the application-authentication request comprises encrypted user information;
providing the application-authentication request to an authentication server;
receiving an authentication cookie and a mapping of the authentication cookie from the authentication server, wherein the authentication cookie is generated at the authentication server based on the authentication server decrypting the user information and receiving validation of the user information from a subscriber profile server;
storing the mapping of the authentication cookie in association with an Internet Protocol (IP) address of the application-authentication request as an authentication key;
providing the authentication cookie to the mobile device;
receiving, from the mobile device, an application request associated with a third-party application, wherein the application request comprises the authentication cookie;
determining that the authentication cookie and an IP address of the application request matches the authentication key;
removing the authentication cookie from the application request;
sending the application request to the third-party application via an application gateway;
receiving services from the third-party application in response to the application request; and
providing the services to the mobile device.
6. The media of claim 5 , wherein the application-authentication request is associated with the third-party application.
7. The media of claim 6 , wherein the authentication server receives validation that the user information from the subscriber profile server is in good standing with the third-party application.
8. The media of claim 7 , wherein the services received from the third-party application are based on the validation that the user information from the subscriber profile server is in good standing with the third-party application.
9. The media of claim 5 , wherein the services received from the third-party application are premium services.
10. The media of claim 5 , wherein the authentication key is valid for a pre-determined period of time.
11. The media of claim 5 further comprising:
in response to removing the authentication cookie from the application request, adding a header directing the application request to the third-party application.
12. The media of claim 11 , wherein the application gateway comprises a Media Access Gateway (MAG).