International Business Machines Corporation

Workday, Inc.

Ishai Borovoy

Artem Spector

Iddo Levin

Todd Eric Kaplinger

Anton Aleksandrov

Ron Perry

Raanan Avidor

Ran Enriko Magen

Yoav Bodor

Amit Ben-Sheffer

Yaron Goldberg

Haim Schneider

Gal A Shachor

Uri Zonens

Tomer Vilensky

Updating web resources includes extracting web resources from the application to local files, and querying an external server for web resource updates specific to at least one operating condition of the client device. A client device includes at least one processor to execute computer readable instructions to extract a web resource from an application downloaded to a native container of a client device, and query a server for web resource updates with a query that comprises a native container identification. A server includes at least one processor to execute computer readable instructions to generate an update bundle for web resources downloaded in an application package by a client device, the update bundle comprising at least one update that is specific to an operating condition of the client device, and, in response to a request from the client device, send the update bundle to the client device.

Updating web resources

Updating web resources includes extracting web resources from an application to local files in response to an initial start-up of the application, downloading updates to the web resources to the local files from an external server; and running the application using contents from the local files.

Updating web resources includes extracting web resources from the application to local files, and querying an external server for web resource updates specific to at least one operating condition of the client device. A server includes at least one processor to execute computer readable instructions to generate an update bundle for web resources downloaded in an application package by a client device, the update bundle comprising at least one update that is specific to an operating condition of the client device, and, in response to a request from the client device, send the update bundle to the client device such that an application on a client device may receive web resource updates that are specific to operating conditions of the client device in order to accomplish a reduction in application start-up time.

Examples of techniques for authenticating mobile applications are described herein. A method includes receiving, via a first server, a key pair and a policy file associated with a mobile service from a second server. Authentication of the mobile application is performed based on the key pair and the policy file. A scope token is generated with an application scope in response to authenticating the mobile application. Authentication of a client device is performed corresponding to the mobile application and a user to generate a doubly-authenticated scope token including a device scope and application authenticity scope. The doubly-authenticated scope token is sent to a security gateway for user authentication. A trebly-authenticated scope token is received with a grant token request and a grant token is sent to the mobile application. The grant token is received from the mobile application. An access token is generated and sent to the mobile application.

Authenticating mobile applications using policy files

Examples of techniques for authenticating mobile applications are described herein. A method can include receiving, by a processor, a key pair and a policy file associated with a mobile service. The processor can receive a service request from a mobile application at a security gateway. The processor can detect that the service request includes an invalid or missing access token. The processor can redirect the mobile application to request a grant token from an authorization end point on a server. The processor can receive a grant token request from the mobile application and forward the grant token request to the server based on a policy file, the policy file including a list of: a plurality of security objects to be authenticated, a plurality of computing devices to authenticate the security objects, and an order of authentication.

Examples of techniques for authenticating mobile applications are described herein. A method includes receiving, at a first server, a key pair and a policy file associated with a mobile service on a second server, the policy file includes a plurality of security objects to be authenticated, a plurality of computing devices to authenticate the security objects, and an order of authentication. The method includes distributing the key pair and the policy file to a security device. The method also includes receiving, at the first server, an authentication request from a mobile application. The method further includes creating an authenticity challenge as specified in the policy file and sending the authenticity challenge with a response to the mobile application.

Updating web resources includes downloading an application to a client device, extracting web resources from the application to local files, and querying an external server for web resource updates specific to at least one operating condition of the client device.

Examples of techniques for validating access tokens are described herein. An example computer-implemented method includes receiving, via a processor, a pushed event at a server. The method includes adding, via the processor, a value of the pushed event to a black list of recently disabled users, devices, applications, or any combination thereof. The method also includes receiving, via the processor, a request to access a resource on the server, the request including an access token. The method further includes comparing, via the processor, a field value of the access token with the black list. The method further includes declining, via the processor, the request based on a match of the field value of the access token with a value of the pushed event in the black list.

Growing community of inventors

Shefayim, Israel

Ishai Borovoy