Google Inc.

Erik David Gustavson

Scott Kriz

Saw Kee Wooi

Aaron Eisenberger

Andrew Arrow

Chung Weng Wai

Jason Carulli

Prashant Nadarajan

Garrett Brown

Fong Woh Fai

Clifton Kaznocha

Romain F Lenglet

A method for a website authentication is provided. The method includes receiving a reference uniform resource locator (URL) at a browser and determining whether the reference URL adheres to an authentication protocol including a credential identifier and a web authentication host URL. When the reference URL adheres to the authentication protocol, the method also includes extracting the credential identifier and the web authentication host URL from the reference URL. The method further includes obtaining credential data from a remote service using the credential identifier and sending web authentication instructions to the browser. The web authentication instructions include the web authentication host URL and the credential data.

Auto-form fill based website authentication

The disclosure describes systems, methods and devices relating to a sign-on and management hub or service for users of multiple internal, external or Software-as-a-Service (SaaS) software applications (Apps), with options for centralized management and sharing of accounts without needing to provide login credentials to individual users.

System for managing remote software applications

A method () for a website authentication is provided. The method includes receiving a reference uniform resource locator (URL) () at a browser () and determining whether the reference URL adheres to an authentication protocol () including a credential identifier () and a web authentication host URL (). When the reference URL adheres to the authentication protocol, the method also includes extracting the credential identifier and the web authentication host URL from the reference URL. The method further includes obtaining credential data () from a remote service () using the credential identifier and sending web authentication instructions () to the browser. The web authentication instructions include the web authentication host URL and the credential data.

A method for expiring tokens includes obtaining a list of valid key identifications (IDs) for at least one valid cryptographic key configured to sign authentication tokens. The method also includes receiving an authentication token from a client authenticating and authorizing the client to access a resource and comprising an ID of a cryptographic key used to sign the authentication token. The method also includes determining whether the cryptographic key used to sign the authentication token is valid based on the list of valid key IDs for the at least one valid cryptographic key. When the cryptographic key used to sign the authentication token is valid, the method includes allowing the client access to the resource.

Security token expiration using signing key rotation

Growing community of inventors

Palo Alto, CA, United States of America

Erik David Gustavson