IP Library Granted Patent US 10,530,759
Granted Patent B2
US 10,530,759 · App. 15/437,202 · Granted Jan 7, 2020

Proxy bypass login for applications on mobile devices

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,530,759
App. No.
15/437,202
Granted
Jan 7, 2020
Kind
B2
Abstract

In one embodiment, an intermediate server receives a request with a secure ID to authorize a software application, transmits the secure ID to a system, receives an access token from the system indicating that the software application has been authorized, evaluates the access token for validity, and transmits a response to the mobile device indicating the software application is authorized.

Claims (41)

1. A method comprising, by a client system of a user:

transmitting, from the client system to a remote system by an intermediate server, a first request to install an application of the remote system on the client system, wherein the application is operable to access content from the remote system;

receiving, at the client system from the remote system by the intermediate server, the application and a first secure identifier responsive to the first request to install the application, wherein the first secure identifier indicates to the intermediate server that the user is authenticated to the remote system;

generating, by the client system, a second secure identifier based on the first secure identifier;

transmitting, from the client system to the remote system by the intermediate server, a second request from the client system to authorize the application to access the remote system, the second request comprising the second secure identifier; and

receiving, at the client system from the remote system by the intermediate server, an access token, wherein the access token indicates that the second secure identifier is valid, and wherein the access token authorizes the application to access the remote system.

2. The method of claim 1 , wherein the access token authorizes the application to access social-networking data from the remote system.

3. The method of claim 2 , further comprising:

transmitting, from the client system to the remote system by the intermediate server, a third request from the client system to access the social-networking data via the remote system, the third request comprising the access token; and

receiving, at the client system from the remote system by the intermediate server, the social-networking data for presentation on the client system.

4. The method of claim 3 , wherein the social-networking data is configured optimized by the intermediate server for presentation on a user interface of the client system.

5. The method of claim 3 , wherein the access token is stored by the intermediate server, the access token further comprising information about the client system, and

wherein the access token authorizes the intermediate server to access the remote system for the social-networking data one or more times without requesting additional information from the user.

6. The method of claim 3 , wherein the third request is a request for a user profile, the social-networking data including the user profile.

7. The method of claim 6 , wherein the presentation of the social-networking data comprises a rendered image of the user profile configured to be displayed on the client system.

8. The method of claim 3 , wherein the remote system comprises a social-networking system, the social-networking data being stored by a data store of the social-networking system.

9. The method of claim 1 , wherein the access token indicates that the second secure identifier is valid via a determination of the remote system that the second secure identifier is valid.

10. The method of claim 1 , wherein the second secure identifier substantially matches the first secure identifier.

11. The method of claim 10 , wherein the second secure identifier comprises a timestamp, and

wherein the timestamp is based on the time when social-networking data was transmitted to the client system.

12. The method of claim 1 , the method further comprising:

determining, by the remote system by the intermediate server, that the timestamp is older than a threshold period of time; and

receiving an indication, from the remote system by the intermediate server, that the second secure ID is not valid.

13. The method of claim 12 , wherein the threshold period of time is 24 hours.

14. The method of claim 1 , the method further comprising:

determining, by the remote system by the intermediate server, that the timestamp is not older than a threshold period of time; and

receiving, by the remote system by the intermediate server, authorization for the application to access the system.

15. The method of claim 1 , wherein the first secure identifier or second secure identifier is encrypted.

16. The method of claim 1 , wherein the user is associated with a social-networking system.

17. An apparatus comprising: one or more processors; and a memory coupled to the processors comprising instructions executable by the processors, the processors operable when executing the instructions to:

transmit, from the client system to a remote system by an intermediate server, a first request to install an application of the remote system on the client system, wherein the application is operable to access content from the remote system;

receive, at the client system from the remote system by the intermediate server, the application and a first secure identifier responsive to the first request to install the application, wherein the first secure identifier indicates to the intermediate server that the user is authenticated to the remote system;

generate, by the client system, a second secure identifier based on the first secure identifier;

transmit, from the client system to the remote system by the intermediate server, a second request from the client system to authorize the application to access the remote system, the second request comprising the second secure identifier; and

receive, at the client system from the remote system by the intermediate server, an access token, wherein the access token indicates that the second secure identifier is valid, and wherein the access token authorizes the application to access the remote system.

18. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

transmit, from the client system to a remote system by an intermediate server, a first request to install an application of the remote system on the client system, wherein the application is operable to access content from the remote system;

receive, at the client system from the remote system by the intermediate server, the application and a first secure identifier responsive to the first request to install the application, wherein the first secure identifier indicates to the intermediate server that the user is authenticated to the remote system;

generate, by the client system, a second secure identifier based on the first secure identifier;

transmit, from the client system to the remote system by the intermediate server, a second request from the client system to authorize the application to access the remote system, the second request comprising the second secure identifier;

receive, at the client system from the remote system by the intermediate server, an access token, wherein the access token indicates that the second secure identifier is valid, and wherein the access token authorizes the application to access the remote system.

Assignments (1)
CHANGE OF NAME Recorded Dec 20, 2021
From: FACEBOOK, INC.
To: META PLATFORMS, INC.
Reel/Frame 058553/0802 →