US 11,895,111 B2
Systems and methods of application single sign on
Dmitry V. Belov, Santa Clara, CA (US); Brent A. Fulgham, San Jose, CA (US); Sudhakar N. Mambakkam, Saratoga, CA (US); Richard J. Mondello, Mountain View, CA (US); Kalyan C. Gopavarapu, Sunnyvale, CA (US); Edgar Tonatiuh Barragan Corte, Sunnyvale, CA (US); and Libor Sykora, Cupertino, CA (US)
Assigned to APPLE INC., Cupertino, CA (US)
Filed by Apple Inc., Cupertino, CA (US)
Filed on Jan. 11, 2023, as Appl. No. 18/153,118.
Application 18/153,118 is a continuation of application No. 16/888,479, filed on May 29, 2020, granted, now 11,582,229.
Claims priority of provisional application 62/856,059, filed on Jun. 1, 2019.
Prior Publication US 2023/0141236 A1, May 11, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); H04L 41/22 (2022.01); H04L 67/02 (2022.01)
CPC H04L 63/0861 (2013.01) [H04L 41/22 (2013.01); H04L 63/083 (2013.01); H04L 63/20 (2013.01); H04L 67/02 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A non-transitory machine-readable medium having executable instructions to cause one or more processing units to perform a method to authorize a device for a service provided by an application, the method comprises:
detecting, on the device, an authorization request by the application executing on the device for the service, the authorization request destined for a service provider server, wherein the service is one of a plurality of services and each of the plurality of services has a different native login mechanism;
in response to detecting the authorization request, performing a local authorization, on the device, for consent to use a single sign on service for the application, the local authorization using at least data including a set of user credentials;
in response to the local authorization, negotiating an authorization token with an authorization server for the service, wherein the authorization token can authorize each of the plurality of services as a result of the local authorization, the authorization token is used for the authorization server to authorize each of the plurality of services, and the authorization token allows the device to access the service without having the device to provide the set of user credentials; and
returning the authorization token to the application.