Single sign-on for access to a central data repository

Patent metadata

Field	Value
Publication number	US-9928508-B2
Application number	US-32717606-A
Country	US
Kind code	B2
Filing date	Jan 6, 2006
Priority date	Aug 4, 2000
Publication date	Mar 27, 2018
Grant date	Mar 27, 2018

Abstract

Systems and methods for providing access to an information account stored in a central data repository. The information account is associated with a consumer and is subject to the consumer's control and management. Consumer authentication information is input by the consumer in connection with a first request for access to the information account via a first web-site. Responsive to authentication of the consumer, a single sign-on feature may be activated for automatically managing subsequent authentications of the consumer so that the consumer will not be required to again input the consumer authentication information upon initiating a second request for access to the information account while interacting with a subsequent web-site that is configured to provide access to the information account upon authentication of the consumer. The single sign-on function may be deactivated upon the occurrence of a terminating event, such as the expiration of a time-out interval.

First claim

We claim:

1. A computer-implemented method for providing access to an information account stored in a central data repository that is accessible via a distributed network and is coupled to a database management system on a host server, wherein the host server is in communication via the distributed network with a network device, the method comprising:
transmitting, by the host server, a client-side application to a browser on the network device;
receiving, by the host server, over the distributed electronic network, consumer authentication information and a first request from the network device, via the client-side application, for access to the information account, the first request specifying information elements;
in response to the first request, authenticating, via a first authentication by the host server, a consumer with the database management system based on the consumer authentication information and providing access to the information account stored in the central data repository;
receiving, by the host server, a browser identifier from the network device;
receiving, by the host server, at least one subsequent authentication request from the browser on the network device for access to the information account;
based on the first authentication of the consumer, performing, by the host server, the at least one subsequent authentications with the database management system, using the browser identifier;
in response to the first request for access to the information account stored in the central data repository, retrieving, by the host server, the specified information elements from the information account; and
transmitting, by the host server, the specified information elements to the browser on the network device.

2. The method of claim 1 , further comprising providing a first information element of the information account comprising one or more name fields to identify the consumer, and providing a second information element of the information account comprising one or more geographic address fields associated with the consumer.

3. The method of claim 1 , wherein transmitting the specified information elements to the network device comprises sending the specified information elements over the distributed electronic network.

4. The method of claim 1 , further comprising parsing the first request to obtain indications of the specified information elements.

5. The method of claim 1 , wherein retrieving the specified information elements from the information account further comprises filtering data from the information account with the database management system based on an identification of a second web-site.

6. A computer readable memory storing instructions that, when executed by a host server, cause the host server to perform operations for accessing an information account stored in a central data repository that is accessible via a distributed electronic network and is coupled to a database management system, wherein the host server is in communication via the distributed network with a network device, the operations comprising:
transmitting, by the host server, a client-side application to a browser on the network device;
receiving, by the host server, over the distributed electronic network, consumer authentication information and a first request from the network device, via the client-side application, for access to the information account, the first request specifying information elements;
in response to the first request, authenticating, via a first authentication by the host server, a consumer with the database management system based on the consumer authentication information and providing access to the information account stored in the central data repository;
receiving, by the host server, a browser identifier from the network device;
receiving, by the host server, at least one subsequent authentication request from the browser on the network device for access to the information account;
based on the first authentication of the consumer, performing, by the host server, the at least one subsequent authentication with the database management system, using the browser identifier;
in response to the first request for access to the information account stored in the central data repository, retrieving, by the host server, the specified information elements from the information account; and
transmitting, by the host server, the specified information elements to the browser on the network device.

7. The method of claim 1 , further comprising performing the at least one subsequent authentication by determining that a previous authentication of the consumer for access to the information account remains valid and generating a message to cause a subsequent web-site to skip a sign-on interface that would otherwise prompt input of the consumer authentication information when a subsequent request for access to the information account is initiated.

8. The method of claim 1 , wherein an authentication of the consumer remains valid if a subsequent request for access to the information account is initiated prior to the occurrence of a terminating event.

9. The method of claim 8 , wherein said terminating event comprises expiration of a time-out interval.

10. A system for providing access to an information account stored in a central data repository that is accessible via a distributed network comprising:
a host server for communicating with the central data repository and with a network device via the distributed electronic network; and
a computer readable storage memory having instructions stored thereon that, when executed by the server, cause the host server to perform a method comprising:
transmitting, by the host server, a client-side application to a browser on the network device;
receiving, by the host server, over the distributed electronic network, consumer authentication information and a first request from the client application executing on the network device for access to the information account, the first request specifying information elements;
in response to the first request, authenticating, via a first authentication by the host server, a consumer with the host server based on the consumer authentication information, thereby providing access to the information account stored in the central data repository;
receiving, by the host server, a browser identifier from the network device;
receiving, by the host server, at least one subsequent authentication request from the browser on the network device for access to the information account;
based on the first authentication of the consumer, performing, by the host server, the at least one subsequent authentication of the consumer using the browser identifier;
retrieving, by the host server, one or more information elements from the information account in response to the first request; and
transmitting, by the host server, the one or more information elements to the browser on the network device.

11. The computer readable memory of claim 6 , wherein an authentication remains valid if a subsequent request for access to the information account is initiated prior to the occurrence of a terminating event.

12. The system of claim 10 , wherein the information account comprises consumer information elements associated with at least one tag.

Assignees

• Steele Nick
• Hawkins Stan
• Maranville Joe
• Bradnan Andrew
• Intellectual Ventures I Llc

Inventors

• Steele Nick
• Hawkins Stan
• Maranville Joe
• Bradnan Andrew

Classifications

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• G06Q20/382 Primary

  insuring higher security of transaction · CPC title

• G06F21/41

  where a single sign-on provides access to a plurality of computers · CPC title

• H04L63/0815

  providing single-sign-on or federations · CPC title