Granted Patent B1

US 8,615,794 · App. 13/737,525 · Granted Dec 24, 2013

Abstract

Claims (31)

1. An apparatus, comprising:

an authorization module implemented in at least one of a memory or a processing device, the authorization module configured to receive, at a first time and from a first mobile application, a request for an access token associated with a second mobile application, the request including an identifier associated with the second mobile application, and a first random verification identifier generated by the second mobile application, the authorization module configured to provide, to the first mobile application and in response to the request, a signal representing an authorization code associated with the access token,

the authorization module configured to receive, from the second mobile application and at a second time after the first time, a signal representing the authorization code, the identifier associated with the second mobile application, and a second random verification identifier, the authorization module configured to provide a signal representing the access token to the second mobile application based at least in part on the first random verification identifier being equal to the second random verification identifier.

2. The apparatus of claim 1 , wherein the request includes a uniform resource locator (URL) associated with an address of the authorization module, the URL including the identifier associated with second mobile application and the first random verification identifier, the authorization module configured to store an association between the first random verification identifier and the identifier associated with the second mobile application.

3. The apparatus of claim 1 , wherein the first mobile application is a web browser application.

4. The apparatus of claim 1 , wherein the authorization module is configured to not provide the first random verification identifier to the first mobile application or the second mobile application.

5. The apparatus of claim 1 , wherein the access token is an Open Authorization (OAuth) access token.

6. The apparatus of claim 1 , wherein the authorization module is configured to receive, from a user of the first mobile application, a signal representing approval to provide the access token to the second mobile application prior to providing the authorization code associated with the access token to the first mobile application.

7. The apparatus of claim 1 , wherein the authorization module is configured to provide the authorization code associated with the access token to the first mobile application by providing, to the first mobile application, a signal representing a uniform resource locator (URL) that (1) includes the authorization code, and (2) the second mobile application is configured to handle.

8. The apparatus of claim 1 , wherein the second mobile application is a native mobile application on a mobile device.

9. A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the code comprising code to cause the processor to:

receive, at a first time and from a first mobile application, a request for an access token associated with a second mobile application, the request including an identifier associated with the second mobile application and a verification identifier generated by the second mobile application;

provide, to the first mobile application and in response to the request, a signal representing an authorization code associated with the access token;

receive, from the second mobile application and at a second time after the first time, a signal representing the authorization code, the identifier associated with the second mobile application, and the verification identifier; and

provide a signal representing the access token to the second mobile application when the authorization code, the identifier associated with the second mobile application, and the verification identifier are verified.

10. The non-transitory processor-readable medium of claim 9 , wherein the first mobile application is a web browser application, the code to cause the processor to provide includes code to cause the processor to provide, to the web browser application, a uniform resource locator (URL) (1) unrecognizable by the web browser and (2) including the authorization code.

11. The non-transitory processor-readable medium of claim 9 , further comprising code to cause the processor to:

receive, from a user of the first mobile application, approval to provide the access token to the second mobile application prior to providing the authorization code associated with the access token to the first mobile application.

12. The non-transitory processor-readable medium of claim 9 , wherein the access token is an Open Authorization (OAuth) access token.

13. The non-transitory processor-readable medium of claim 9 , wherein the request includes a uniform resource locator (URL) associated with an address of an authorization module.

14. The non-transitory processor-readable medium of claim 9 , further comprising code to cause the processor to:

store an association between the verification identifier and the identifier associated with the second mobile application.

15. An apparatus, comprising:

a first mobile application implemented in at least one of a memory or a processing device, the first mobile application configured to generate a random verification identifier, the first mobile application configured to initiate a second mobile application such that the second mobile application sends a signal representing the random verification identifier and an identifier associated with the first mobile application to an authorization module at a first time,

the first mobile application configured to receive, at a second time after the first time, a signal representing an authorization code, the authorization code provided within an address associated with the first mobile application,

the first mobile application configured to provide a signal representing the random verification identifier and the authorization code to the authorization module, the first mobile application configured to receive a signal representing an access token associated with the first mobile application based at least in part on the authorization module validating the random verification identifier and the authorization code.

16. The apparatus of claim 15 , wherein the second mobile application is a web browser application.

17. The apparatus of claim 15 , wherein the address associated with the first mobile application is a uniform resource locator (URL) (1) that includes the authorization code; and (2) from which the second mobile application is configured to extract the authorization code.

18. The apparatus of claim 15 , wherein the access token is an Open Authorization (OAuth) access token.

19. The apparatus of claim 15 , wherein the first mobile application is configured to provide a signal representing an address associated with the authorization module to the second mobile application when initiating the second mobile application.

20. The apparatus of claim 15 , wherein the first mobile application is configured to provide the access token to an application module associated with the first mobile application in response to receiving the signal representing the access token.

Assignments (12)