The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
May. 19, 2020

Filed:

Jun. 30, 2017
Applicant:

Microsoft Technology Licensing, Llc, Redmond, WA (US);

Inventors:

Mao Yu, Kirkland, WA (US);

Siddharth Uppal, Bothell, WA (US);

Yuri Georgiev Dogandjiev, Seattle, WA (US);

Adrian Orbita Solis, Bellevue, WA (US);

Larry Jin, Bellevue, WA (US);

Assignee:
Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 21/31 (2013.01); H04L 12/58 (2006.01); H04W 12/06 (2009.01); H04W 4/21 (2018.01); H04L 29/08 (2006.01);
U.S. Cl.
CPC ...
H04L 63/0884 (2013.01); G06F 21/31 (2013.01); H04L 51/02 (2013.01); H04L 63/08 (2013.01); H04L 63/0807 (2013.01); H04L 67/02 (2013.01); H04W 4/21 (2018.02); H04W 12/06 (2013.01); H04L 63/083 (2013.01); H04L 63/102 (2013.01);
Abstract

Systems and methods are provided that securely authenticate a user of a web application. For example, the user may utilize a bot from within a first application, such as a chat application. The user may request the bot to access a second application (e.g., a social-networking application) that is remote from the first application. If the bot does not have authorization, the bot may redirect the user to a webpage for the second application, where the user may enter login credentials. Upon verification, the second application may provide an access token to a webpage associated with the bot. To authenticate the bot user, the bot webpage may generate and cache a nonce that is transmitted back to the first application, which then transmits it to the bot. The bot may then compare the received nonce with the cached nonce. If the nonces match, the user may be securely authenticated.


Find Patent Forward Citations

Loading…