IP Library Granted Patent US 9,258,294
Granted Patent B2
US 9,258,294 · App. 14/145,716 · Granted Feb 9, 2016

Remote authentication method with single sign on credentials

Inventors: Mohammad Raheel Khalid (Budd Lake, NJ); Sm Masudur Rahman (Edison, NJ); Samir Vaidya (Highland Park, NJ)
Assignee: Cellco Partnership
H04L63/0815G06F21/41
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,258,294
App. No.
14/145,716
Granted
Feb 9, 2016
Kind
B2
Abstract

Systems and methods for remote authentication using Single Sign-On (SSO) credentials are disclosed. An implementation includes transmitting a request for an identification code from an application to a wireless service provider, the request provided through an encrypted transport protocol, receiving the identification code as a messaging service message from the wireless service provider, securely routing the received identification code to the requesting application, upon receipt of the identification code at the application, retrieving an authentication token for the application through the encrypted transport protocol and providing the authentication token to an application content server to allow content transfer between the application content server and the application.

Claims (52)

1. A method comprising:

transmitting a request for an identification code from an application at a user device to a wireless service provider, the request provided through an encrypted transport protocol via an IP type packet data network;

receiving the identification code at the user device in a messaging service message from the wireless service provider;

securely routing the received identification code to the requesting application at the user device;

upon receipt of the identification code at the application, retrieving an authentication token for the application at the user device through the encrypted transport protocol; and

providing the authentication token from the user device to an application content server to allow content transfer between the application content server and the application.

2. The method of claim 1 , wherein the application content server is configured to provide the authentication token to the wireless service provider to validate the application prior to the content transfer.

3. The method of claim 1 , wherein securely routing the received identification code to the requesting application includes preventing other applications from accessing the identification code during the routing to the requesting application.

4. The method of claim 1 , wherein the requesting and the retrieving is performed through a single sign-on (SSO) dynamic-link library (DLL).

5. The method of claim 1 , wherein

the request for the identification code is provided via Hyper Text Transfer Protocol-Secure (HTTPS); and

receiving the identification code includes receiving the identification code in an SMS message from the wireless service provider.

6. The method of claim 1 , wherein the identification code is received at a modem of a mobile device.

7. The method of claim 1 , wherein the request for the identification code is provided to a subscriber profile controller of the wireless service provider.

8. The method of claim 1 , further comprising:

storing the received authentication token in a memory of a modem of a mobile device; and

encrypting the stored identification token with a private key, wherein the private key is further encrypted with a public key.

9. The method of claim 8 , further comprising:

decrypting the encrypted private key; and

decrypting the encrypted stored authentication token with the decrypted private key prior to providing the decrypted authentication token to an application content server.

10. A mobile device, comprising:

a transceiver configured to enable communication of digital information via a mobile network;

a processor coupled with the transceiver;

a storage device accessible to the processor; and

an executable program in the storage device, wherein execution of the program by the processor configures the mobile device to perform functions, including functions to:

transmit a request for an identification code from an application at the mobile

device to a wireless service provider, the request provided through an encrypted transport protocol via an IP type packet data network;

receive the identification code at the mobile device in a messaging service message from the wireless service provider;

securely route the received identification code to the requesting application at the mobile device; upon receipt of the identification code for the application at the mobile device, retrieve an authentication token for the application through the encrypted transport protocol; and

provide the authentication token to an application content server to allow content transfer between the application content server and the application at the mobile device.

11. The mobile device of claim 10 , wherein the application content server is configured to provide the authentication token to the wireless service provider to validate the application prior to the content transfer.

12. The mobile device of claim 10 , wherein securely routing the received identification code to the requesting application includes functions to:

prevent other applications from accessing the identification code during the routing to the requesting application.

13. The mobile device of claim 10 , wherein the request and the retrieval is performed through a single sign-on (SSO) dynamic-link library (DLL).

14. The mobile device of claim 10 , wherein execution of the program by the processor configures the mobile device to perform functions, including functions to:

transmit the request for the identification code via Hyper Text Transfer Protocol-Secure (HTTPS); and

receive the identification code in an SMS message from the wireless service provider.

15. The mobile device of claim 10 , wherein the identification code is received at a modem included in the mobile device.

16. The mobile device of claim 10 , wherein the request for the identification code is provided to a subscriber profile controller of the wireless service provider.

17. The mobile device of claim 10 , wherein execution of the program by the processor configures the mobile device to perform functions, including functions to:

store the received the received authentication token in a memory of a cellular modem of a mobile device; and

encrypt the stored identification token with a private key, wherein the private key is further encrypted with a public key.

18. The mobile device of claim 17 , wherein execution of the program by the processor configures the mobile device to perform functions, including functions to:

decrypt the encrypted private key; and

decrypt the encrypted stored authentication token with the decrypted private key prior to providing the decrypted authentication token to the application content server.

19. A non-transitory computer-readable medium comprising instructions which, when executed by one or more computers, cause the one or more computers to:

transmit a request for an identification code from an application at a user device to a wireless service provider, the request provided through an encrypted transport protocol via an IP type packet data network;

receive the identification code at the user device in a messaging service message from the wireless service provider;

securely route the received identification code to the requesting application at the user device;

upon receipt of the identification code at the application, retrieve an authentication token for the application at the user device through the encrypted transport protocol; and

provide the authentication token from the user device to an application content server to allow content transfer between the application content server and the application.

20. The computer-readable medium of claim 19 , wherein the application content server is configured to provide the authentication token to the wireless service provider to validate the application prior to the content transfer.

Assignments (2)
CORRECTIVE ASSIGNMENT TO CORRECT THE SPELLING OF THE SECOND INVENTOR'S NAME PREVIOUSLY RECORDED ON REEL 031864 FRAME 0399. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Dec 29, 2015
From: KHALID, MOHAMMAD RAHEEL; RAHMAN, SM MASUDUR; VAIDYA, SAMIR S.
To: CELLCO PARTNERSHIP D/B/A VERIZON WIRELESS
Reel/Frame 037397/0151 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 31, 2013
From: KHALID, MOHAMMAD RAHEEL; RAHMAN, SM MASUDER; VAIDYA, SAMIR S.
To: CELLCO PARTNERSHIP D/B/A VERIZON WIRELESS
Reel/Frame 031864/0399 →
Continuity (1)
Related Publication 20150188907A1 · Jul 2, 2015