IP Library Granted Patent US 8,554,934
Granted Patent B1
US 8,554,934 · App. 13/429,320 · Granted Oct 8, 2013

Application single sign on leveraging virtual local area network identifier

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,554,934
App. No.
13/429,320
Granted
Oct 8, 2013
Kind
B1
Abstract

A processor-implemented method for providing application single sign on leveraging a virtual local area network identifier is provided. The method comprises an authentication server providing a client device access to a network via association with a virtual local area network and a credential. The method also comprises the device invoking an application hosted on an application server and the application server identifying a virtual local area network tag associated with the device. The method also comprises the application server sending a message to the authentication server requesting linkage of the tag with a user identification associated with the device. The method also comprises the authentication server linking the tag with the user identification associated with the device and sending a message to the application server containing the identification. The method also comprises the application server using the identification to authenticate the device with the application and the device receiving access.

Claims (38)

1. A processor-implemented method for providing single sign-on leveraging a virtual local area network identifier, comprising:

providing, by an authentication server, a client device access to a network via association with a virtual local area network and a credential;

receiving, by an application server, a request that includes a virtual local area network tag from the client device to invoke an application in the virtual local area network hosted on the application server;

maintaining an association between the virtual local area network tag and the client device in one or more databases;

maintaining an association between the client device and a user identification in the one or more databases;

subsequently leveraging the virtual local area network tag included in the request from the client device to provide the client device access to the application without separately authenticating with the application, wherein the leveraging comprises:

identifying, by the application server, the virtual local area network tag associated with the client device included in the request from the client device;

sending, by the application server, a request message to the authentication server requesting the user identification associated with the client device based on the identified virtual local area network tag included in the request from the client device; and

in response to receiving the request message, matching, by the authentication server, the identified virtual local area network tag included in the request from the client device with the user identification associated with the client device and maintained in the one or more databases and sending a reply message to the application server containing the user identification; and

subsequently providing, by the application server, the client device with access to the application using the user identification contained in the reply message, wherein the providing comprises the application server promoting the application, which normally requests a unique user identification and a password or other credential, to rely on the virtual local area network tag and the user identification contained in the reply message and permit access to the client device.

2. The method of claim 1 , further comprising dynamically configuring the virtual local area network, wherein the virtual local area network tag is provided upon instantiation of the virtual local area network tag.

3. The method of claim 1 , wherein providing the client device access to the network further comprises instantiating, by the authentication server, the virtual local area network for exclusive association with the client device.

4. The method of claim 1 , further comprising associating the virtual local area network with client devices used by individuals.

5. The method of claim 1 , further including:

tearing down, by the authentication server, the virtual local area network; and

recovering, by the authentication server, the virtual local area network tag to a resource pool whereby the virtual local area network tag becomes available for future reuse.

6. The method of claim 1 , further comprising providing, by the application server, the client device access to the application based on the user identification and a level of security associated with the credential.

7. The method of claim 1 , further comprising accessing, by the authentication server, stored records associating the virtual local area network tag with the user identification associated with the client device in response to receiving the request message.

8. The method of claim 1 , wherein the client device is one of a desktop computer, laptop computer, tablet computer, mobile telephone, media player, personal digital assistant (PDA), and portable electronic device.

9. A system that provides single sign-on leveraging a virtual local area network identifier, the system comprising:

an authentication server comprising a non-transitory memory and a processor, the authentication server configured to:

provide a client device access to a network via association with a virtual local area network and a credential,

one or more databases, wherein the one or more databases maintain an association between a virtual local area network tag and the client device and an association between the client device and a user identification, and

an application server comprising a non-transitory memory and a processor, the application server configured to:

receive a request that includes the virtual local area network tag from the client device to invoke an application in the virtual local area network hosted on the application server,

subsequently leverage the virtual local area network tag included in the request from the client device to provide the client device access to the application without separately authenticating with the application, wherein the leveraging comprises:

identify the virtual local area network tag included in the request from the client device,

send a request message to the authentication server requesting the user identification associated with the client device based on the identified virtual local area network tag included in the request from the client device, and

in response to receiving the request message, match the identified virtual local area network tag included in the request from the client device with the user identification associated with the client device and maintained in the one or more databases and send a reply message to the application server containing the user identification; and

subsequently provide the client device with access to the application using the user identification contained in the reply message, wherein the providing comprises the application server promoting the application, which normally requests a unique user identification and a password or other credential, to rely on the virtual local area network tag and the user identification contained in the reply message and permit access to the client device.

10. The system of claim 9 , wherein the virtual local area network is dynamically configured and the virtual local area network tag is provided upon instantiation of the virtual local area network tag.

11. The system of claim 9 , wherein the virtual local area network is associated with client devices used by individuals.

12. The system of claim 9 , wherein the authentication server is further configured to:

tear down the virtual local area network; and

recover the virtual local area network tag to a resource pool whereby the virtual local area network tag becomes available for future reuse.

13. The system of claim 9 , wherein the application server is configured to provide the client device access to the application based on the user identification and a level of security associated with the credential.

14. The system of claim 9 , wherein the authentication server is further configured to access stored records associating the virtual local area network tag with the user identification associated with the client device in response to receiving the request message.

15. The system of claim 9 , wherein the client device is one of a desktop computer, laptop computer, tablet computer, mobile telephone, media player, personal digital assistant (PDA), and portable electronic device.

Assignments (5)
RELEASE OF SECURITY INTEREST Recorded Aug 23, 2022
From: DEUTSCHE BANK TRUST COMPANY AMERICAS
To: IBSV LLC; LAYER3 TV, LLC; PUSHSPRING, LLC; T-MOBILE CENTRAL LLC; T-MOBILE USA, INC.; ASSURANCE WIRELESS USA, L.P.; BOOST WORLDWIDE, LLC; CLEARWIRE COMMUNICATIONS LLC; CLEARWIRE IP HOLDINGS LLC; SPRINTCOM LLC; SPRINT COMMUNICATIONS COMPANY L.P.; SPRINT INTERNATIONAL INCORPORATED; SPRINT SPECTRUM LLC
Reel/Frame 062595/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 4, 2021
From: SPRINT COMMUNICATIONS COMPANY L.P.
To: T-MOBILE INNOVATIONS LLC
Reel/Frame 055604/0001 →
TERMINATION AND RELEASE OF FIRST PRIORITY AND JUNIOR PRIORITY SECURITY INTEREST IN PATENT RIGHTS Recorded Apr 2, 2020
From: DEUTSCHE BANK TRUST COMPANY AMERICAS
To: SPRINT COMMUNICATIONS COMPANY L.P.
Reel/Frame 052969/0475 →
SECURITY AGREEMENT Recorded Apr 2, 2020
From: T-MOBILE USA, INC.; ISBV LLC; T-MOBILE CENTRAL LLC; LAYER3 TV, INC.; PUSHSPRING, INC.; BOOST WORLDWIDE, LLC; CLEARWIRE COMMUNICATIONS LLC; CLEARWIRE IP HOLDINGS LLC; CLEARWIRE LEGACY LLC; SPRINT COMMUNICATIONS COMPANY L.P.; SPRINT INTERNATIONAL INCORPORATED; SPRINT SPECTRUM L.P.; ASSURANCE WIRELESS USA, L.P.
To: DEUTSCHE BANK TRUST COMPANY AMERICAS
Reel/Frame 053182/0001 →
GRANT OF FIRST PRIORITY AND JUNIOR PRIORITY SECURITY INTEREST IN PATENT RIGHTS Recorded Mar 6, 2017
From: SPRINT COMMUNICATIONS COMPANY L.P.
To: DEUTSCHE BANK TRUST COMPANY AMERICAS
Reel/Frame 041895/0210 →