Microsoft Technology Licensing, LLC

Darren L Anderson

Ryan W Battle

John Hal Howard

Max Edward Metral

Boyd Cannon Multerer

Jeffrey Craig Kunins

Ling Tony Chen

Mark Daniel VanAntwerp

Dinarte R Morais

Paul E Newson

Christopher E Mitchell

Joshua G Poley

Greg A Marks

Michael Wei-Quiang Guo

Mitsuo Koikawa

A console-based multi-user authentication process allows multiple users of a game console to be authenticated together in a single request/reply exchange with an authentication entity. The results of which is the possession of a single ticket that can be used to prove authenticity of multiple authentication principals to one or more online services. Also described is a handshake process that can be used to initially establish an authentication account for each game console, in which the account creation server can trust that a genuine game console is making the request.

Multiple user authentication for online console-based gaming

Discovery and distribution of game session security information includes receiving a request to generate a new game session from a computing device and maintaining a record of a game session identifier for the new game session and a game session key for the new game session, and making the new game session available for other computing devices to join. A request for information describing one or more of a plurality of game sessions may also be received and responded to with the information describing the one or more game sessions as well as a session key that can be used to communicate with at least one of the one or more other computing devices that are part of the game session.

Discovery and distribution of game session information

A mechanism for seeking access of a client to a first server is described. The mechanism involves determining that a client seeking access to the first server is not authenticated by an authentication server. The mechanism further involves communicating a request for login information to be returned to the second server from the client. Login information is received at the authentication server from the client. The client is authenticated by comparing the login information with authentication information maintained by the authentication server. When the login information matches the authentication information, a user authentication indicator is generated at the authentication server and the user sends the authentication indicator to the first server.

Accessing a server using a user authentication indicator

A user, by way of a computing device, requests and receives content from a first server at the computing device. An authentication response is also received from the first server at the computing device of the user. The authentication response includes an address of the second server and an executable script. The computing device of the user executes the executable script by issuing a request to the second server for state information corresponding to the user, receiving the state information from the second server; and determining, based on the state information, whether the user is authenticated to the second server. If the user is not authenticated to the second server, the computer device of the user displays a login module that is visually associated with the first server. Such login module collects login information for authenticating the user to the second server. If the user is authenticated in the second server, the computing device of the user issues a request to the second server for vouching information for authenticating the user to the first server.

Transparent authentication using an authentication server

A system determines whether to grant user access. Prior to granting access, the network server authenticates the user by sending an authentication request. An authentication server determines whether the user has been authenticated. If the user has been authenticated, the network server is notified and the network server grants access. If the user is not authenticated, then login information is retrieved and compared to maintained authentication information. If the retrieved login information matches, then the network server is notified. The retrieved login and authentication information is concealed from the network server. If the user is authenticated, a user profile is communicated to the network server with the notification. If the user is successfully authenticated, a cookie is provided to a user Internet browser. The cookie contains information regarding user authentication, the user's profile, and a list of network servers previously visited.

Authenticating user access request with an authentication server for accessing a network server without communicating user authentication cookie to the network server

A system determines whether to grants access to a network server by a user. Initially, a user attempts to gain access to a network server, such as a web server. Prior to granting access to the network server, the network server authenticates the user by sending an authentication request to an authentication server. The authentication server determines whether the user was already authenticated by the authentication server. If the user was already authenticated by the authentication server, then the network server is notified that the user is authenticated. The network server then grants the user access to the network server. If the user was not already authenticated by the authentication server, then login information is retrieved from the user and compared to authentication information maintained by the authentication server. If the retrieved login information matches the authentication information, then the network server is notified that the user is authenticated. The retrieved login information and the authentication information is concealed from the network server. If the user is authenticated, then a user profile is communicated to the network server along with the notification that the user is authenticated. If the user is successfully authenticated, then a cookie is provided to an Internet browser operated by the user. The cookie contains information regarding user authentication, the user's profile, and a list of network servers previously visited by the user.

Authenticating user access to a network server without communicating user authentication cookie to the network server

A system determines whether to grant a user access to a network server. Prior to granting access to the network server, the network server authenticates the user by sending an authentication request to an authentication server. The authentication server determines whether the user was already authenticated by the authentication server. If the user is authenticated by the authentication server, then the network server is notified that the user is authenticated through the use of an authentication ticket, and the network server grants the network server user access. If the user is not authenticated by the authentication server, then login information is retrieved from the user and compared to authentication information maintained by the authentication server. If the retrieved login information matches the authentication information, then the network server is notified that the user is authenticated by using the authentication ticket.

Growing community of inventors

Bellevue, WA, United States of America

Darren L Anderson