Patent ID: 9736126
Date: 2017-08-15
CPC Classifications: G06F,H04L,H04W

Claim:
1. A system, comprising a processor and memory to: receive, via a first server, a key pair and a policy file associated with a mobile service from a second server, the policy file comprising a list of: distribute the key pair and the policy file; receive an authentication request from a mobile application; authenticate the mobile application based in part on the key pair and the policy file; generate a scope token with an application scope in response to authenticating the mobile application, the scope token comprising a signature based in part on the key pair; authenticate a client device corresponding to the mobile application and a user to generate a doubly-authenticated scope token comprising a device scope and application authenticity scope; send the doubly-authenticated scope token to a security gateway for user authentication; receive a trebly-authenticated scope token with a grant token request and send a grant token to the mobile application, the trebly authenticated scope token to include a user scope; receive the grant token from the mobile application; and generate and send an access token to the mobile application.