US 12,445,437 B2
Systems and methods of application single sign on
Dmitry V. Belov, Santa Clara, CA (US); Brent A. Fulgham, San Jose, CA (US); Sudhakar N. Mambakkam, Saratoga, CA (US); Richard J. Mondello, Mountain View, CA (US); Kalyan C. Gopavarapu, Sunnyvale, CA (US); Edgar Tonatiuh Barragan Corte, Sunnyvale, CA (US); and Libor Sykora, Cupertino, CA (US)
Assigned to Apple Inc., Cupertino, CA (US)
Filed by Apple Inc., Cupertino, CA (US)
Filed on Jan. 5, 2024, as Appl. No. 18/405,858.
Application 18/405,858 is a continuation of application No. 18/153,118, filed on Jan. 11, 2023, granted, now 11,895,111.
Application 18/153,118 is a continuation of application No. 16/888,479, filed on May 29, 2020, granted, now 11,582,229, issued on Feb. 14, 2023.
Claims priority of provisional application 62/856,059, filed on Jun. 1, 2019.
Prior Publication US 2024/0146724 A1, May 2, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); H04L 41/22 (2022.01); H04L 67/02 (2022.01)
CPC H04L 63/0861 (2013.01) [H04L 41/22 (2013.01); H04L 63/083 (2013.01); H04L 63/20 (2013.01); H04L 67/02 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A non-transitory machine-readable medium having executable instructions to cause one or more processing units to perform a method to authorize a device for a service provided by an application executing on the device, the method comprises:
receiving, by the application on the device, an authorization request, the authorization request destined for a service provider server, wherein the service is one of a plurality of services and each of the plurality of services has a different native login mechanism, wherein the authorization request is detected by the device, and wherein the device performs a local authentication using a set of user credentials;
receiving, through an authorization user interface, user consent for a single sign on service to authorize the application;
receiving, by the application, an authorization token that authorizes each of the plurality of services as a result of the local authentication and the user consent, the authorization token is used for an authorization server to authorize each of the plurality of services, the authorization token allows the device to access the service without having the device to provide the set of user credentials, the authorization token was negotiated with the authorization server; and
sending the authorization token to the service provider server.