IP Library Granted Patent US 9,578,018
Granted Patent B2
US 9,578,018 · App. 14/513,180 · Granted Feb 21, 2017

Remote sign-out of web based service sessions

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,578,018
App. No.
14/513,180
Granted
Feb 21, 2017
Kind
B2
Abstract

Remote sign-out of web based service sessions. As a part of remote sign-out of web based service sessions, a user authentication token is accessed that is used to establish a web based service session and this user authentication token is stored in memory of an authentication server and returned in a cookie to the device. User access and deletion of the user authentication token from memory is accommodated using a device different from that which initially established the web based service session. Upon receipt of a browser request involving the user authentication token, it is determined whether the user authentication token is stored in memory. An access denial indication is provided to a web based service that indicates that the user authentication token is not stored in memory.

Claims (45)

1. A method for remote sign-out of web based service sessions, comprising:

accessing a user authentication token that is used to establish a first web based service session and storing said user authentication token in memory associated with a web based service, the user authentication token authorizing only a single user to access the first web based service session;

accommodating user access and deletion by the single user of said user authentication token from said memory using a device different from that which initially established the first web based service session, said deletion of said user authentication token being responsive to a user request by the single user to said web based service without installation of software on said device different from that which initially established the first web based service session;

upon receipt of a browser request involving said user authentication token, determining if said user authentication token is stored in said memory;

if it is determined that said user authentication token is not stored in said memory, providing an access denial indication to said web based service; and

determining if a user password has been changed, and if said user password has been changed deleting all user authentication tokens associated with the user from said memory.

2. The method of claim 1 wherein said accommodating comprises:

upon user request, providing access to a data storage table of said memory that contains said user authentication token;

upon user request, deleting one or more specified tokens from said data storage table; and

upon receipt of a subsequent browser request involving said user authentication token, providing an access denial indication to a web based service that indicates that said user authentication token is not stored in said memory so that said browser request will be denied.

3. The method of claim 1 further comprising:

determining if a user password has been changed periodically, and if said user password has been changed deleting all user authentication tokens from said memory.

4. The method of claim 1 wherein said user authentication token is associated with a first computer system and contains a user identifier.

5. The method of claim 1 wherein said first computer system is a mobile computer system.

6. The method of claim 1 wherein said memory is a data storage table that associates user authentication tokens with an identifier of a user.

7. The method of claim 1 wherein said web based service session is provided by a web based service and is established using an authentication service hosted by a server that is different from a server that hosts said web based service.

8. The method of claim 1 wherein said indication that said user authentication token is not stored in said memory is provided to a web based service.

9. A method for remote sign-out of a web based service session of a mobile device, comprising:

in response to establishing a first web based service session involving said mobile device, accessing a user authentication token and storing said user authentication token in memory associated with said web based service;

enabling user access and deletion of said user authentication token from said memory using a device different from said mobile device, said deletion of said user authentication token being responsive to a user request to said web based service through a browser without installation of software on said mobile device;

in response to a receipt of a browser request involving said user authentication token from said mobile device, determining if said user authentication token is stored in said memory;

providing an access denial indication to said web based service if it is determined that said user authentication token from said mobile device is not stored in said memory; and

determining if a user password has been changed, and if said user password has been changed deleting all user authentication tokens from said memory.

10. The method of claim 9 wherein said accommodating comprises:

upon user request, providing access to a data storage table of said memory that contains said user authentication token; and

upon user request, deleting one or more specified tokens from said data storage table.

11. The method of claim 9 further comprising:

determining if a user password has been changed periodically, and if said user password has been changed deleting all user authentication tokens from said memory.

12. The method of claim 9 wherein said user authentication token is associated with a first computer system and contains a user identifier.

13. The method of claim 9 wherein said web based service session is provided by a web based service and is established using an authentication service hosted by a server that is different from a server that hosts said web based service.

14. The method of claim 9 wherein said indication that said user authentication token is not stored in said memory is provided to a web based service.

15. A computer storage medium, the computer storage medium being hardware storing computer-executable components, comprising:

a user token accessing component for accessing a user authentication token that is used to establish a first web based service session and storing said user authentication token in memory of an authentication server, said user authentication token authorizing only a single user to access said first web based service session;

a token deletion accommodating component for accommodating user access and deletion by the single user of said user authentication token from said memory using a device different from that which initially established the session, said deletion of said user authentication token is responsive to a user request to a web based service without installation of software on the device different from that which initially established the session;

token storage determining component for determining if said user authentication token is stored in said memory upon receipt of a browser request involving said user authentication token;

an indicating component for providing an access denial indication to said web based service; and

a determining component for determining if a user password has been changed, and if said user password has been changed deleting all user authentication tokens from said memory.

16. The medium of claim 15 wherein said token deletion accommodating component:

upon user request, provides access to a data storage table of said memory that contains said user authentication token;

upon user request, deletes one or more specified tokens from said data storage table; and

upon receipt of a subsequent browser request involving said user authentication token, provides an access denial indication to a web based service that said user authentication token is not stored in said memory so that said browser request will be denied.

17. The medium of claim 15 further comprising:

the determining component for determining if a user password has been changed periodically, and if said user password has been changed deleting all user authentication tokens from said memory.

18. The medium of claim 15 wherein said user authentication token is associated with a first computer system and contains a user identifier.

19. The medium of claim 15 wherein said first computer system is a mobile computer system.

Assignments (3)
CORRECTIVE ASSIGNMENT TO CORRECT THE CONVEYING PARTY EXECUTION DATES AND REPLACEMENT ASSIGNMENT PREVIOUSLY RECORDED ON REEL 040675 FRAME 0486. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS).. Recorded Dec 21, 2016
From: LIU, JOHNNY; SENZEL, KEITH; GU, YE
To: MICROSOFT CORPORATION
Reel/Frame 041172/0049 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 19, 2016
From: LIU, JOHNNY; SENZEL, KEITH; GU, YE
To: MICROSOFT CORPORATION
Reel/Frame 040675/0486 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 14, 2015
From: MICROSOFT CORPORATION
To: MICROSOFT TECHNOLOGY LICENSING, LLC
Reel/Frame 036100/0048 →