Patent ID: 9118648
Filing Date: 2015-08-25
Classification: G06F,H04L,H04W

Abstract:
1. A method for authorizing access to a third party application, which is called client, to protected resources owned by a user and hosted in a server, the method comprising: a) the client asking for a temporary token from the server; b) in addition to responding to the client with said temporary token, the server sending a first SMS (Short Message Service) to the user, said first SMS providing means to authenticate the user; wherein the means to authenticate the user, included in the first SMS, are an URL (Universal Resource Locator) carrying a token not known for the client and an indication for the user to click on the URL, wherein the URL points to an Authorization and Authentication Entity, and the user is authenticated by clicking on the URL included in the SMS, which was sent to his handset; c) authenticating the user by the means provided in the previous steps; d) the user authorizing the client, in a web-browser opened by the user clicking on the URL included in the SMS; e) after the authentication of the user and the authorization of the client, the server sending a second SMS to the user providing information related to an access token; f) the client receiving the information related to the access token; g) the client getting the access token from the information received; h) the client accessing the protected resources using the access token.