Systems and methods of account verification upgrade

Patent metadata

Field	Value
Publication number	US-12086231-B2
Application number	US-202318461322-A
Country	US
Kind code	B2
Filing date	Sep 5, 2023
Priority date	Jun 1, 2020
Publication date	Sep 10, 2024
Grant date	Sep 10, 2024

Abstract

A method and apparatus of a device that converts an account associated with an application to use a single sign-on service is described. In an exemplary embodiment, the device receives an indication of a weak password associated with the account. The device further sends a request to verify an account credential for a user associated with the device. In addition, the device receives the verification of the account credential. The device additionally requests a single sign-on credential for the account and receives the single sign-on credential. Furthermore, the device sends a message to a server associated with a service for the application that the application is registered for the single sign-on service.

First claim

What is claimed is:

1. A non-transitory machine-readable medium having executable instructions to cause one or more processing units to perform a method to convert an account associated with an application to use a single sign-on service, the method comprising:
receiving, on a device, an indication of a weak password associated with the account; and in response to receiving the indication of the weak password, converting the authorization
process for the account to the single sign-on service by,
requesting a single sign-on credential for the account, receiving the single sign-on credential,
negotiating an authorization token with an identification server, and
sending a message to a server associated with a service for the application that the application is registered for a single sign-on service, wherein a single sign-on service is a service that allows a user to use a single set of credentials to sign-on to multiple services across one or more authorization domains and the sending of the message includes forwarding the authorization token to the server associated with the service.

2. The non-transitory machine-readable medium of claim 1 , further comprising:
performing a local authorization on the device using a set of user credentials.

3. The non-transitory machine-readable medium of claim 2 , wherein the set of user credentials are selected from the group consisting of biometric user credentials or a username and password.

4. The non-transitory machine-readable medium of claim 1 , further comprising: converting the account to use the single sign-on service.

5. The non-transitory machine-readable medium of claim 1 , further comprising:
sending a request to verify the the single sign-on credential for the account that comprises,
presenting a third-party authorization user interface, and
receiving third-party credentials from the user.

6. The non-transitory machine-readable medium of claim 5 , further comprising: sending the third-party credential, wherein the third-party credential is verified.

7. The non-transitory machine-readable medium of claim 1 , wherein the weak password includes at least of one of a full word, a password common to another account, a password with easily detectable patterns, a password with a known name associated with the user, a password derived from characteristics of the user, or a password taken associated with a compromised service.

8. The non-transitory machine-readable medium of claim 7 , wherein an easily detectable pattern is at least one of a sequence of increasing numbers, a sequence of increasing letters, a sequence of letters that follow a keyboard pattern, or a sequence of numbers that follow keyboards patterns.

9. The non-transitory machine-readable medium of claim 1 , wherein the weak password includes at least of one of a full word, a password common to another account, a password with easily detectable patterns, a password with a known name associated with the user, a password derived from characteristics of the user, or a password taken associated with a compromised service.

10. The non-transitory machine-readable medium of claim 9 , wherein an easily detectable pattern is at least one of a sequence of increasing numbers, a sequence of increasing letters, a sequence of letters that follow a keyboard pattern, or a sequence of numbers that follow keyboards patterns.

11. A method to convert an account associated with an application to use a single sign-on service, the method comprising:
receiving, on a device, an indication of a weak password associated with the account; and in response to receiving the indication of the weak password, converting an authorization
process for the account to the single sign-on service by,
requesting a single sign-on credential for the account,
receiving the single sign-on credential,
negotiating an authorization token with an identification server, and
sending a message to a server associated with a service for the application that the application is registered for a single sign-on service, wherein a single sign-on service is a service that allows a user to use a single set of credentials to sign-on to multiple services across one or more authorization domains and the sending of the message includes forwarding the authorization token to the server associated with the service.

12. The method of claim 11 , wherein the converting further comprises:
performing a local authorization on the device using a set of user credentials.

13. The method of claim 12 , wherein the set of user credentials are selected from the group consisting of biometric user credentials or a username and password.

14. The method of claim 12 , wherein the converting further comprises:
negotiating an authorization token with an identity provider.

15. The method of claim 14 , wherein the converting further comprises:
forwarding the authorization token to the application.

16. The method of claim 11 , further comprising: converting the account to use the single sign-on service.

17. The method of claim 11 , further comprising:
sending a request to verify the single sign-on credential for the account that comprises,
presenting a third-party authorization user interface, and
receiving third-party credentials from the user.

18. The method of claim 17 , further comprising:
sending the third-party credential, wherein the third-party credential is verified.

19. The method of claim 11 , wherein the weak password includes at least of one of a full word, a password common to another account, a password with easily detectable patterns, a password with a known name associated with the user, a password derived from characteristics of the user, or a password taken associated with a compromised service.

20. The method of claim 19 , wherein an easily detectable pattern is at least one of a sequence of increasing numbers, a sequence of increasing letters, a sequence of letters that follow a keyboard pattern, or a sequence of numbers that follow keyboards patterns.

Assignees

• Apple Inc

Inventors

• Mondello Richard J
• Mulani Jay S
• Birdsall Jonathan
• Belov Dmitry V
• Abbasian Reza
• Quesada David P
• Coffman Patrick L

Classifications

• G06F21/46

  by designing passwords or checking the strength of passwords · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L63/0815 Primary

  providing single-sign-on or federations · CPC title