Systems, devices and methods for authorizing endpoints of a push pathway

摘要

An apparatus, system, and method for authorizing endpoints of a push pathway for push notifications are described herein. In one example embodiment, an identity provider element authenticates a first endpoint of the push pathway, determines an authentication token associated with the first endpoint, and determines a channel identifier in response to a successful validation of the authentication token associated with the first endpoint. In this embodiment, the identity provider element also authenticates a second endpoint of the push pathway, determines an authentication token associated with the second endpoint, and determines a handle for the push pathway in response to a successful validation of both the authentication token associated with the first endpoint and the authentication token associated with the second endpoint. The push pathway is established for transmission of push notifications from the first to the second endpoint upon establishing the handle for the push pathway.

主权项

1. A method of authorizing endpoints of a push pathway for push notifications, the endpoints comprising a push initiator element and a client device, the method to be performed by an identity provider element that operates independently of a push notification server configured to control transmission of push notifications from the push initiator element to the client device over the push pathway, the push pathway comprising a logical network connection amongst the push notification server, the push initiator element and the client device, the method comprising:
the identity provider element authenticating the client device based on one or more security credentials associated with the client device; in response to a successful authentication of the client device, the identity provider element generating and transmitting to the client device a client authentication token associated with the client device; the identity provider element determining validity of a test client authentication token purporting to be the client authentication token and providing to the push notification server a first indication of the validity of the test client authentication token; the identity provider element authenticating the push initiator element based on one or more security credentials associated with the push initiator element; and in response to a successful authentication of the push initiator element, the identity provider element generating and transmitting to the push initiator element a push initiator element authentication token associated with the push initiator element; the identity provider element determining validity of a test push initiator element authentication token purporting to be the push initiator element authentication token and providing to the push notification server a second indication of the validity of the test push initiator element authentication token, wherein, in the event that the identity provider element successfully validates the test client authentication token, the first indication permits the push notification server to determine a channel identifier, and wherein, in the event that the identity provider element successfully validates the test client authentication token and the test push initiator element authentication token, the first indication and the second indication permit the push notification server to determine a handle for the push pathway, wherein the handle is associated with the channel identifier and is used to establish the push pathway for transmission of push notifications from the push initiator element to the client device.