IP Library Granted Patent US 9,154,568
Granted Patent B2
US 9,154,568 · App. 13/425,189 · Granted Oct 6, 2015

Proxy bypass login for applications on mobile devices

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,154,568
App. No.
13/425,189
Granted
Oct 6, 2015
Kind
B2
Abstract

An intermediate server can receive a request from a mobile device to authorize a software application, transmit a secure ID included in the request to a social-networking system, receive an access token from the social-networking system indicating that the software application has been authorized, evaluate the access token for validity, and transmit a response to the mobile device indicating the software application is authorized. The secure ID can indicate that a user of the mobile device has been authenticated by the social-networking system. The access token can be valid when the access token and the secure ID both correspond to the user of the mobile device.

Claims (43)

1. A method comprising:

receiving, at an intermediate server, a first request from a mobile device to authorize a software application, the first request comprising a secure ID, wherein the secure ID indicates that a user of the mobile device has been authenticated by a social-networking system;

sending, from the intermediate server, the secure ID received from the mobile device to the social-networking system;

receiving, at the intermediate server, an access token from the social-networking system in response to the social-networking system determining that the secure ID is valid, wherein the access token indicates that the software application has been authorized by the social-networking system;

evaluating, by the intermediate server, the access token received from the social-networking system for validity, wherein evaluating the access token for validity comprises determining that the access token received from the social-networking system and the secure ID received from the mobile device both correspond to the user of the mobile device; and

sending, from the intermediate server, a response to the mobile device indicating the software application is authorized in response to evaluating that the access token is valid.

2. The method of claim 1 , further comprising:

storing, by the intermediate server, the access token in association with information about the mobile device,

wherein the secure ID indicates that the user of the mobile device has been authenticated based on previously-provided user identification information, and

wherein the access token authorizes the intermediate server to access the social-networking system one or more times without requesting additional user information.

3. The method of claim 1 , further comprising:

receiving, at the intermediate server, a second request from the mobile device, the second request comprising a request for a social-networking data from the social-networking system;

accessing, by the intermediate server, the social-networking data on the social-networking system;

generating, by the intermediate server, a display data optimized for display on the mobile device, wherein the display data is based on the social-networking data; and

sending, from the intermediate server, the display data to the mobile device.

4. The method of claim 3 , wherein the second request is a request for a user profile, the social-networking data includes the user profile, and the display data comprises a rendered image of the user profile capable of being displayed on the mobile device.

5. The method of claim 1 , wherein evaluating the access token for validity comprises determining whether the social-networking system evaluated the secure ID as valid.

6. The method of claim 1 , wherein authorizing the software application comprises authorizing the software application to access the social-networking system via the intermediate server.

7. The method of claim 1 , wherein authorizing the software application comprises authorizing the intermediate server to access the social-networking system as a proxy for the mobile device.

8. The method of claim 1 , further comprising:

generating, by the intermediate server, a session in response to the first request, the session comprising the secure ID; and

storing, by the intermediate server, the session.

9. The method of claim 8 , further comprising:

accessing, by the intermediate server, the secure ID from the stored session.

10. The method of claim 9 , wherein the session is an application programming interface (API) session.

11. An apparatus comprising:

one or more processors; and

a memory coupled to the processors comprising instructions executable by the processors, the processors operable when executing the instructions to:

receive, at an intermediate server, a first request from a mobile device to authorize a software application, the first request comprising a secure ID, wherein the secure ID indicates that a user of the mobile device has been authenticated by a social-networking system;

send, from the intermediate server, the secure ID received from the mobile device to the social-networking system;

receive, at the intermediate server, an access token from the social-networking system in response to the social-networking system determining that the secure ID is valid, wherein the access token indicates that the software application has been authorized by the social-networking system;

evaluate, at the intermediate server, the access token received from the social-networking system for validity, wherein the access token is valid when the access token received from the social-networking system and the secure ID received from the mobile device both correspond to the user of the mobile device; and

send, from the intermediate server, a response to the mobile device indicating the software application is authorized in response to evaluating that the access token is valid.

12. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

receive, at an intermediate server, a first request from a mobile device to authorize a software application, the first request comprising a secure ID, wherein the secure ID indicates that a user of the mobile device has been authenticated by a social-networking system;

send, from the intermediate server, the secure ID received from the mobile device to the social-networking system;

receive, at the intermediate server, an access token from the social-networking system in response to the social-networking system determining that the secure ID is valid, wherein the access token indicates that the software application has been authorized by the social-networking system;

evaluate, by the intermediate server, the access token received from the social-networking system for validity by determining that the access token received from the social-networking system and the secure ID received from the mobile device both correspond to the user of the mobile device; and

send, from the intermediate server, a response to the mobile device indicating the software application is authorized in response to evaluating that the access token is valid.

13. The method of claim 1 , wherein evaluating the access token for validity further comprises determining whether the social-networking system determined that the secure ID has expired.

14. The method of claim 1 , wherein evaluating the access token for validity further comprises determining whether the social-networking system determined that a timestamp included with the secure ID is older than a threshold period of time.

15. The method of claim 14 , wherein the social-networking system determines that the secure ID is valid when the timestamp is not older than the threshold period of time.

16. The method of claim 14 , wherein the timestamp is based on a time at which the social-networking system received a request from the mobile device to install the software application.

Assignments (2)
CHANGE OF NAME Recorded Dec 20, 2021
From: FACEBOOK, INC.
To: META PLATFORMS, INC.
Reel/Frame 058553/0802 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 1, 2012
From: ALISON, THOMAS; BERDICHEVSKY, MICHA; ELDAR, BOSMAT; PANDIT, SHASHANK
To: FACEBOOK, INC.
Reel/Frame 028306/0157 →