Patent ID: 9674699
Date: 2017-06-06
CPC Classifications: H04L,H04W

Claim:
1. A method for secure communication in a mobile computing device, comprising: receiving, by a first program installed on the mobile computing device, an access token request from a second program installed on the mobile computing device and separate from the first program, wherein the first program is a single sign-on (SSO) application; requesting, by the first program and in response to the access token request, a first program authorization code from an authentication server; obtaining, by the first program, the first program authorization code from the authentication server after a verification of the first program by the authentication server; submitting, by the first program, the first program authorization code to the authentication server with a request to obtain a first access token; obtaining, by the first program after a verification of the first program authorization code by the authentication server, the first access token from the authentication server through a first token request; submitting, by the first program, the first access token to the authentication server, wherein if the first access token is valid, the authentication server returns an authorization code usable by the first program to request a second access token from the authentication server; submitting the second access token directly to a remote resource by the mobile computing device; applying, by the second program, a hash algorithm to a publisher's certificate and transmitting a hash result with the access token request; including a list of registered applications, token enable settings, current token values, and current token statuses within a user interface of the mobile computing device; and wherein the remote resource is located remotely from the mobile computing device; wherein the second access token is submittable by the second program installed on the mobile computing device to the remote resource located remotely from the authentication server as proof that the second program has been authenticated by the authentication server, thereby granting the second program access to data at the remote resource; and wherein the first access token is not shared with the second program.