Systems and methods for single sign-in for multiple accounts

Abstract

Systems and methods which facilitate single user sign-in for multiple accounts are shown. Embodiments create a single user base which maps users to multiple accounts. The use of a single set of credentials by the user is provided for according to embodiments irrespective of the applications associated with the various accounts having very different security protocols. A system hosting the shared user base preferably provides a single authentication point for multiple services. Embodiments an authenticator string, as may be passed between a client and bridge server and / or client and application, in order to enable user access, detect attacks with respect to a client conversation, etcetera. In addition to providing a shared user base for single sign-in, embodiments provide additional shared functionality and / or functionality not available from the applications themselves.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS[0001]The present application is a continuation of co-pending, commonly assigned, patent application Ser. No. 11 / 542,658 entitled “SYSTEMS AND METHODS FOR SINGLE SIGN-IN FOR MULTIPLE ACCOUNTS,” filed Oct. 3, 2006. The present application is related to U.S. patent application Ser. No. 11 / 542,654 entitled “Secure Application Bridge Server,” filed Oct. 3, 2006 and U.S. patent application Ser. No. 09 / 692,747 entitled “Machine Dependent Login for On-Line Value-Bearing Item System,” filed Oct. 18, 2000, the disclosures of which are hereby incorporated herein by reference.TECHNICAL FIELD[0002]The present invention is related generally to providing user access to a plurality of accounts and, more particularly, to providing user access to a plurality of accounts using a single user sign-in.BACKGROUND OF THE INVENTION[0003]Various applications provide restrictions on user access and user access protocols for a number of reasons. User access is restricted...

AI Technical Summary

Benefits of technology

"The present invention provides a system and method for enabling single sign-in for multiple accounts. This means that a user can use a single set of credentials to access multiple services or applications associated with the user's accounts. The system includes a shared user base that maps users to multiple accounts, allowing them to access multiple services or applications without having to enter separate login information. This facilitates centralization of user credential management and validation, as well as providing business intelligence regarding user behavior and unified billing for service fees. The invention also provides a single sign-in for a host system that acts as a bridge server between the user's application and the host system, providing additional security and isolation. The shared user base can be created from the user base of a primary application or database. Overall, the invention enhances user experience and management of user accounts."

Problems solved by technology

Even where different applications adopt similar credentials requirements, a user may not be able to use the same credentials for each account.

For example, although a user has a particular user name with respect to a account associated with a first application, this user name may have already been in use with respect to another application and thus not be available for the user for a account associated with that application.

Moreover, even where the applications associated with a particular user's accounts are provided or supported by a same vendor, supporting that user is complicated by the fact that the user has multiple sets of credentials for accessing the accounts.

It can be readily appreciated that the foregoing will require additional time and will result in a diminished user experience.

Not only do the foregoing separate accounts for applications provided by a same vendor result in customer support issues, but the vendor itself may not be able to correlate the various activities or behavior of the user.

Accordingly, marketing opportunities and the ability to collect robust information with respect to user behavior system wide may be missed.

The foregoing problems are exasperated as new services or applications are added.

Images