Comcast Cable Communications, LLC

James Hoelsworth

Jonathan Squire

Christopher Zarcone

Thomas Kilgallon

Anvesh Paidipala

Herbert Marti

Sai Sreenath Adabala

Hugo Allexis Cardona Escalante

A client application requesting to access a resource may be issued an access token and a refresh token. Instead of revoking the client application access to a resource by revoking the refresh token, allowing the access token to expire, and forcing a user associated with the client application to re-login, authentication for the client application to access the resource may be obtained from the user. The authentication may be obtained from the user while the client application, without notification of the concurrent authentication, may continue attempts to access the resource, for example, via an invalid access token. Once authentication is obtained, the client application may be provided access to the resource, for example, via a valid access token.

Methods and systems for accessing a resource

A mobile device may comprise a secure memory. The mobile device may receive a request from a mobile application executing on the mobile device to store data in the secure memory. The request may comprise the data and a group identifier associated with the mobile application. A primary symmetric key associated with the group identifier may be determined. The data may be encrypted, using the primary symmetric key, to produce first encrypted data. A secondary symmetric key associated with the group identifier may be determined. The first encrypted data may be encrypted, using the secondary symmetric key, to produce second encrypted data. The second encrypted data may be stored to the secure memory.

Systems and methods for data security on a mobile device

Growing community of inventors

Philadelphia, PA, United States of America

James Hoelsworth