System and Method for Mobile Single Sign-On Integration

摘要

Improved methods and systems for integrating client-side single sign-on (SSO) authentication security infrastructure with a mobile authorization protocol are disclosed that provide clients with secured SSO mobile access to third-party services. Embodiments of the present invention leverage SSO authentication protocols that are utilized at many client-side systems already and integrate these SSO authentication protocols with a mobile SSO authorization protocol, thereby effectively extending the SSO framework to mobile service requests of web services at third-party service provider systems. Embodiments of the present invention provide a secure and automated solution which may be implemented in any existing client-side SSO frameworks with minimum cost and time, while providing a lightweight and secure solution that provides users using either native applications or mobile web application to access third-party web services.

主权项

1. A method for providing access to mobile web services provided by a service provider system using a single sign-on (SSO) credential managed by a client-side computer system, the method comprising:
receiving an authentication token from the mobile device, the authentication token generated by the client-side computer system upon authenticating the identity of a user at the mobile device using the user's single sign on credential; processing the authentication token to validate the authentication token; generating an authorization access token; providing the authorization access token to the mobile device; processing a service request received from the mobile device, the service request containing the authorization access token; processing the authorization access token to validate authority to receive the service request; and servicing the service request in response to the step of processing the authorization access token.