US 12,137,091 B2
Single sign-on enabled with OAuth token
Mayank Maria, Bangalore (IN); Aarathi Balakrishnan, Bangalore (IN); Dharmvir Singh, Bangalore (IN); Madhu Martin, Bangalore (IN); Vikas Pooven Chathoth, Bangalore (IN); and Vamsi Motukuru, Monmouth Junction, NJ (US)
Assigned to ORACLE INTERNATIONAL CORPORATION, Redwood Shores, CA (US)
Filed by Oracle International Corporation, Redwood Shores, CA (US)
Filed on Jun. 28, 2023, as Appl. No. 18/343,345.
Application 18/343,345 is a continuation of application No. 17/684,949, filed on Mar. 2, 2022, granted, now 11,736,469.
Application 17/684,949 is a continuation of application No. 16/164,709, filed on Oct. 18, 2018, granted, now 11,303,627, issued on Apr. 12, 2022.
Claims priority of provisional application 62/678,895, filed on May 31, 2018.
Prior Publication US 2023/0336536 A1, Oct. 19, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/00 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/0815 (2013.01) [H04L 63/0853 (2013.01); H04L 63/108 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method comprising:
receiving, by a server, an access token request from an application, the access token request including a session identifier associated with a Single Sign-On (SSO) session created prior to generation of the access token request, wherein session information associated with the SSO session was stored;
based on the session identifier, retrieving the session information;
determining, using the session information, that the SSO session is valid, wherein the determining that the SSO session is valid comprises:
determining, based on the session information, a session expiration time;
determining that the session expiration time has not yet been reached;
determining, based on the session information, a timeout duration; and
determining that the SSO session has not timed out based upon the timeout duration;
generating an access token in response to the determining that the SSO session is valid, wherein the access token provides the application with access to a protected resource; and
sending, by the server, the access token to the application to enable the application to use the access token for accessing the protected resource.