Application-assisted login for a web browser

Patent metadata

Field	Value
Publication number	US-10757107-B2
Application number	US-201514634008-A
Country	US
Kind code	B2
Filing date	Feb 27, 2015
Priority date	Feb 27, 2015
Publication date	Aug 25, 2020
Grant date	Aug 25, 2020

Abstract

Systems, methods, and computer-readable storage media for authenticating a user account with a synchronized content management system are disclosed. A synchronized online content management system may receive a request from a client device to access content in the content management system via a web browser that is running on the client device. The system may identify that a client-side application for the content management system has been installed on the client device and that the client-side application is already logged into a user account with the content management system. The system can cause the web browser to open a local host connection to the client-side application such that the web browser may be able to obtain from the client application some user account identifying information for the user account. The system can then cause the web browser to log into the user account by using the user account identifying information.

First claim

The invention claimed is:

1. A computer-implemented method comprising:
receiving, at a synchronized content management system, a request from a device to access the synchronized content management system via a web browser running on the device;
identifying a client-side application installed on the device, the client-side application having a local host server installed on the device run by the client-side application, wherein the client-side application is associated with the synchronized content management system;
determining that the client-side application is logged into a user account with the synchronized content management system;
sending an indication to the web browser that causes the web browser to open a local host connection with the local host server run by the client-side application, wherein the web browser automatically accesses user account identifying information for the user account from the client-side application through the local host connection; and
causing the web browser to log into the user account by using the user account identifying information.

2. The computer-implemented method of claim 1 , wherein the user account identifying information is at least one of a name, a username, an email address, a password, a token, and a cryptographic nonce.

3. The computer-implemented method of claim 1 , wherein the web browser logs into the user account without receiving, from a user of the device, user credentials associated with the user account.

4. The computer-implemented method of claim 1 , further comprising:
sending a confirmation request to the web browser, the confirmation request asking a user of the device to confirm whether to log into the user account;
when a positive confirmation is received from the user in response to the confirmation request, causing the web browser to log in to the user account without requiring the user to provide login credentials; and
when a negative confirmation is received from the user in response to the confirmation request, causing the web browser to request the login credentials from the user.

5. A system comprising:
one or more processors; and
a non-transitory computer-readable storage medium storing instructions which, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
sending, from a client device to a synchronized content management system, a request to access the synchronized content management system via a web browser running on the client device;
establishing a local host connection between the web browser and a local host server running on the client device run by a client-side application associated with the synchronized content management system;
receiving user account identifying information from the local host server run by the client-side application of the client device via the local host connection; and
logging the web browser into the user account automatically by using the user account identifying information.

6. The system of claim 5 , wherein the client-side application runs on the client device.

7. The system of claim 5 , wherein the client-side application is logged into the user account before the request is sent.

8. The system of claim 5 , wherein logging the web browser into the user account comprises:
upon navigating to a website associated with the synchronized content management system, transmitting the user account identifying information to the synchronized content management system via the web browser.

9. The system of claim 8 , wherein logging the web browser into the user account further comprises:
presenting, to a user of the client device, a choice between a first option to log into the user account and a second option to log into a new user account;
receiving a user input in response to the choice;
when the user input indicates that the user prefers the first option, logging the web browser into the user account; and
when the user input indicates that the user prefers the second option, requesting to the user to enter credentials for the new user account and logging the web browser into the new user account by using the credentials.

10. The system of claim 5 , wherein the user account identifying information is at least one of a name, a username, an email address, a password, a token, and a cryptographic nonce.

11. The system of claim 5 , wherein logging the web browser into the user account is performed at a website associated with the synchronized content management system and without the web browser receiving, from a user of the client device, user credentials associated with the user account.

12. A non-transitory computer-readable storage device storing instructions which, when executed by one or more processors, cause the one or more processors to perform operations comprising:
at a client application, on a client device, associated with a content management system, logging into a user account associated with the content management system;
upon receiving a request from a web browser, on the client device having a local host server, automatically establishing a communication channel between the web browser and the client application, wherein the communication channel is established via the local host server; and
providing user account identifying information to the web browser via the communication channel, thereby enabling the web browser to automatically log into the user account using the user account identifying information.

13. The non-transitory computer-readable storage device of claim 12 , wherein the user account identifying information is at least one of a name, a username, an email address, a password, a token, and a cryptographic nonce.

14. The non-transitory computer-readable storage device of claim 12 , storing additional instructions which, when executed by the one or more processors, cause the one or more processors to perform further operations comprising:
prior to establishing the communication channel, verifying that the request comes from a legitimate source.

15. The non-transitory computer-readable storage device of claim 14 , wherein verifying that the request comes from the legitimate source comprises:
determining whether the request comes from a local connection.

16. The non-transitory computer-readable storage device of claim 14 , wherein verifying that the request comes from the legitimate source comprises:
determining whether the request comes from a website associated with the content management system by examining an origin header associated with the request.

17. The non-transitory computer-readable storage device of claim 14 , wherein verifying that the request comes from the legitimate source comprises:
determining whether the request comes from a known web browser.

Assignees

• Dropbox Inc

Inventors

• Kaplan Josh
• Cook Adam
• Poletto Stephen
• Wright Thomas
• Faraone Luke

Classifications

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L67/306

  User profiles · CPC title

• H04L63/102 Primary

  Entity profiles · CPC title

• H04L67/1097

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title