At&t Intellectual Property I, LP

Robert D Garskof

Jay Oliver Glasgow

Precia Carraway

Methods, computer-readable storage media and apparatuses for processing event notifications are disclosed. For example, a processor receives an event notification of an event from a device of a service provider that is providing a service to a user, wherein the network service provider is distinct from the service provider, determines that the service provider and the event are of a type of service provider and a type of event, respectively, that the user has consented to receive the event notification, sends a message in a unified message format to a device of the user, the message comprising the event, receives a response from the device of the user containing an indication of whether the event is an authorized event, and sends the indication of whether the event is an authorized event to the device of the service provider.

Event notifications for multiple services

Apparatus and methods are provided that prevent cross-site request forgery at one or more web servers. A proxy dynamically monitors web server responses to client requests for content having a selected characteristic, adds a hidden token to content identified as having the selected characteristic prior to serving the content to a requesting client, and stores a copy of the hidden token for later verification that client request content sent to a web server is authentic. The proxy monitors client request content sent to the one or more web servers for a selected characteristic, and allows client request content having the selected characteristic to be processed by a web server application only if the client request content includes a token previously provided by the proxy and only if the token has a value matching a stored token value for the respective client.

Apparatus and methods for preventing cross-site request forgery

Systems and methods for implementing a location token service (LTS) to enhance the security of mobile device identity tokens by using the location of the mobile device to augment the tokens. The LTS enforces re-authentication (login) of the mobile device to one or more applications if the mobile device moves beyond a threshold distance from the location of the last use of the token within a time period defined in a temporal threshold. The LTS increases authentication strength and drastically reduces the potential for spoofing or otherwise permitting unauthorized access to one or more applications on the mobile device.

Growing community of inventors

Northford, CT, United States of America

Robert D Garskof