Collaborative sign-on

Patent metadata

Field	Value
Publication number	US-9954846-B2
Application number	US-201514691248-A
Country	US
Kind code	B2
Filing date	Apr 20, 2015
Priority date	Apr 20, 2015
Publication date	Apr 24, 2018
Grant date	Apr 24, 2018

Abstract

An authentication approval request can be received by a first system from a second system. The first system can determine whether the user is required to be logged into at least a second online account hosted by at least a third system unrelated to the second system in order to approve the authentication request. If the user is required to be logged into at least the second online account in order to approve the authentication request, the first system can determine whether the user presently is logged into at least the second online account in at least one presently active user session. If the user presently is logged into at least the second online account in at least one presently active user session, the first system can communicate to the second system a response indicating that the user is approved for authentication with the second system.

First claim

What is claimed is:

1. A method, comprising:
responsive to a user providing at least one authentication credential to a second system during an attempt to log into a first online account hosted by the second system, receiving, by a first system comprising at least one processor, an authentication approval request from the second system;
responsive to receiving the authentication approval request from the second system, determining, by the first system, whether the user is required to be logged into a second online account hosted by a third system unrelated to the second system and logged into at least a third online account hosted by at least a fourth system in order to approve the authentication request;
responsive to determining that the user is required to be logged into the second online account hosted by the third system and logged into at least the third online account hosted by at least the fourth system in order to approve the authentication request, determining, by the first system, whether the user presently is logged into the second online account hosted by the third system in a first presently active user session and whether the user presently is logged into at least the third online account hosted by at least the fourth system in at least a second presently active user session; and
responsive to determining that the user presently is logged into the second online account hosted by the third system in the first presently active user session and that the user presently is logged into at least the third online account hosted by at least the fourth system in at least the second presently active user session, communicating to the second system a response to the authentication approval request indicating that the user is approved for authentication with the second system to log into the first online account hosted by the second system; wherein in response to the communicating to the second system a response to the authentication approval request, the user is provided access to the first online account hosted by the second system.

2. The method of claim 1 , wherein determining, by the first system, whether the user is required to be logged into the second online account hosted by the third system unrelated to the second system and logged into at least the third online account hosted by at least the fourth system in order to approve the authentication request comprises:
determining whether the user is required to be logged into the second online account hosted by the third system unrelated to the second system and at least the third online account hosted by at least the fourth system in order to approve the authentication request by accessing, by the first system, log-in rules established for the user and processing, by the first system, the log-in rules.

3. The method of claim 1 , wherein determining, by the first system, whether the user presently is logged into the second online account hosted by the third system in the first presently active user session comprises:
communicating, by the first system, a log-in status request message to the third system, the log-in status request requesting the user's log-in status with the third system; and
determining, by the first system, whether the user presently is logged into the second online account hosted by the third system in the first presently active user session by receiving from the third system a login status message, the log-in status message indicating whether the user presently is logged into the second online account hosted by the third system in the first presently active user session.

4. The method of claim 1 , wherein determining, by the first system, whether the user presently is logged into the second online account hosted by the third system in the first presently active user session comprises:
accessing, by the first system, a data structure stored to memory elements, the data structure tracking whether the user presently is logged into the second online account; and
determining, by the first system, whether the user presently is logged into the second online account hosted by the third system in the first presently active user session by processing data accessed from the data structure.

5. The method of claim 1 , wherein determining, by the first system, whether the user presently is logged into the second online account hosted by the third system in the first presently active user session comprises:
periodically polling, by the first system, the third system to inquire whether the user presently is logged into the second online account hosted by the third system; and
receiving, by the first system, status messages indicating whether the user presently is logged into the second online account hosted by the third system.

6. A first system, comprising:
a processor programmed to initiate executable operations comprising:
responsive to a user providing at least one authentication credential to a second system during an attempt to log into a first online account hosted by the second system, receiving, by the first system, an authentication approval request from the second system;
responsive to receiving the authentication approval request from the second system, determining, by the first system, whether the user is required to be logged into a second online account hosted by a third system unrelated to the second system and logged into at least a third online account hosted by at least a fourth system in order to approve the authentication request;
responsive to determining that the user is required to be logged into the second online account hosted by the third system and logged into at least the third online account hosted by at least the fourth system in order to approve the authentication request, determining, by the first system, whether the user presently is logged into the second online account hosted by the third system in a first presently active user session and whether the user presently is logged into at least the third online account hosted by at least the fourth system in at least a second presently active user session; and
responsive to determining that the user presently is logged into the second online account hosted by the third system in the first presently active user session and that the user presently is logged into at least the third online account hosted by at least the fourth system in at least the second presently active user session, communicating to the second system a response to the authentication approval request indicating that the user is approved for authentication with the second system to log into the first online account hosted by the second system; wherein in response to the communicating to the second system a response to the authentication approval request, the user is provided access to the first online account hosted by the second system.

7. The first system of claim 6 , wherein determining, by the first system, whether the user is required to be logged into the second online account hosted by the third system unrelated to the second system and logged into at least the third online account hosted by at least the fourth system in order to approve the authentication request comprises:
determining whether the user is required to be logged into the second online account hosted by the third system unrelated to the second system and at least the third online account hosted by at least the fourth system in order to approve the authentication request by accessing, by the first system, log-in rules established for the user and processing, by the first system, the log-in rules.

8. The first system of claim 6 , wherein determining, by the first system, whether the user presently is logged into the second online account hosted by the third system in the firs

Assignees

• IBM

Inventors

• Butterfield Daniel J
• Cheng Tsz S
• Fitzpatrick Gregory P

Classifications

• H04L63/0815 Primary

  providing single-sign-on or federations · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title