Automatic authentication switching in online live chat applications

Patent metadata

Field	Value
Publication number	US-10693856-B2
Application number	US-201715672203-A
Country	US
Kind code	B2
Filing date	Aug 8, 2017
Priority date	Aug 8, 2017
Publication date	Jun 23, 2020
Grant date	Jun 23, 2020

Abstract

Methods and apparatuses are described for automatic authentication switching in online chat sessions. A server receives a request to establish an online chat session from a first client device, including authentication credentials associated with the first client device. The server establishes an online chat session between the first client device and a second client device via a first authenticated communications channel. The server transmits one or more chat messages between the first client device and the second client device using the first authenticated communications channel. The first client device determines that the online chat session has lost authentication. The first client device automatically switches the online chat session to a second unauthenticated communications channel. The server maintains the established online chat session between the first client device and the second client device via the second unauthenticated communications channel.

First claim

What is claimed is:

1. A computerized method of automatic authentication switching in online chat sessions, the method comprising:
receiving, by a server computing device, a request to establish an online chat session from a first client computing device, the request including authentication credentials associated with the first client computing device;
establishing, by a server computing device, an online chat session between the first client computing device and a second client computing device via a first authenticated text communications channel after validating the authentication credentials, the first authenticated text communications channel comprising a first URL that, when activated, connects the first client computing device to the second client computing device via an authentication module at the server computing device, a portion of the first URL denoting an association with the first authenticated text communications channel, the server computing device passing the online chat session through the authentication module upon detecting the portion of the first URL denoting an association with the first authenticated text communications channel;
transmitting, by the server computing device, one or more chat messages between the first client computing device and the second client computing device using the first authenticated text communications channel;
determining, by the first client computing device, that the online chat session has lost authentication;
automatically switching, by the first client computing device, the online chat session to a second unauthenticated text communications channel, the second authenticated text communications channel comprising a second URL that, when activated, connects the first client computing device to the second client computing device without using the authentication module at the server computing device, a portion of the second URL denoting an association with the second unauthenticated text communications channel, the server computing device passing the online chat session to the second client computing device without using the authentication module upon detecting the portion of the second URL denoting an association with the second unauthenticated text communications channel; and
maintaining, by the server computing device, the established online chat session between the first client computing device and the second client computing device via the second unauthenticated text communications channel.

2. The method of claim 1 , further comprising preventing, by the server computing device, one or more chat messages from being transmitted between the first client computing device and the second client computing device via the first authenticated text communications channel when the first client computing device determines that the online chat session has lost authentication.

3. The method of claim 2 , wherein the one or more chat messages prevented from being transmitted between the first client computing device and the second client computing device via the first authenticated text communications channel contain sensitive information.

4. The method of claim 1 , wherein the first URL includes an in-line customer identifier.

5. The method of claim 1 , wherein the step of automatically switching the online chat session comprises transferring the online chat session from the first authenticated text communications channel to the second unauthenticated text communications channel and then closing the first authenticated text communications channel.

6. The method of claim 1 , wherein the step of determining that the online chat session has lost authentication comprises one or more of: determining that a browser at the first client computing device has logged out of a secure website; determining that authentication associated with the online chat session has expired; and determining that a browser at the first client computing device has navigated away from a secure website.

7. The method of claim 1 , wherein the first client computing device determines that the online chat session has lost authentication upon receiving an authentication error from the server computing device.

8. The method of claim 7 , wherein the first client computing device generates an authentication loss chat message in response to the authentication error by appending an authentication loss trigger to a chat message and sends the authentication loss chat message to the server computing device.

9. The method of claim 7 , wherein the second client computing device generates an authentication loss chat message by appending an authentication loss trigger to a chat message and sends the authentication loss chat message to the server computing device.

10. The method of claim 7 , further comprising:
generating, by the server computing device, a blank authentication credential upon receiving the authentication loss chat message; and
transmitting, by the server computing device, the blank authentication credential to the second client computing device.

11. The method of claim 10 , further comprising generating, by the second client computing device, a visual indicator on a display coupled to the second client computing device, the visual indicator instructing a user of the second client computing device that the online chat session has lost authentication.

12. The method of claim 1 , further comprising:
instructing, by the server computing device, the first client computing device to resend the authentication credentials upon determining that the online chat session has lost authentication;
automatically switching, by the server computing device, the online chat session from the second unauthenticated text communications channel to the first authenticated text communications channel upon validating the resent authentication credentials; and
maintaining, by the server computing device, the established online chat session between the first client computing device and the second client computing device via the first authenticated text communications channel.

13. A system for automatic authentication switching in online chat sessions, the system comprising:
a first client computing device;
a second client computing device; and
a server computing device,
wherein the server computing device:
receives a request to establish an online chat session from the first client computing device, the request including authentication credentials associated with the first client computing device;
establishes an online chat session between the first client computing device and the second client computing device via a first authenticated text communications channel after validating the authentication credentials, the first authenticated text communications channel comprising a first URL that, when activated, connects the first client computing device to the second client computing device via an authentication module at the server computing device, a portion of the first URL denoting an association with the first authenticated text communications channel, the server computing device passing the online chat session through the authentication module upon detecting the portion of the first URL denoting an association with the first authenticated text communications channel;
transmits one or more chat messages between the first client computing device and the second client computing device using the first authenticated text communications channel; and

wherein the first client computing device:
determines that the online chat session has lost authentication; and
automatically switches the online chat session to a second unauthenticated text communications channel, the

Assignees

• Fmr Llc

Inventors

• Cox Jr Richard Elliott
• Campbell Robert S
• Hightower Ryan
• Balachandran Ramakrishnan
• Gerges Mena

Classifications

• H04L65/1083

  In-session procedures · CPC title

• H04L63/105

  Multiple levels of security · CPC title

• H04L65/1069

  Session establishment or de-establishment · CPC title

• H04L67/145

  avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title