Patent ID: 9225712
Filing Date: 2015-12-29
Classification: G06F,G06Q,H04L

Abstract:
1. A non-transitory computer-readable medium having stored contents that configure a computing device of a sign-on service to perform a method, the method comprising: registering, by the sign-on service, a client site with the sign-on service to enable users interacting with the client site to perform sign-on activities via the sign-on service, the registering including storing a copy at the sign-on service of secret information associated with the client site; registering, by the sign-on service, a first user with the sign-on service by storing sign-on information at the sign-on service for the first user; receiving, by the sign-on service and after the registering of the client site and of the first user, an electronic request sent by the client site to cause a sign-on to the sign-on service of the first user based on interactions of the first user with the client site, the received request including the sign-on information for the first user and further including a digital signature that is generated by the client site based on first information that is included in the request and on the secret information associated with the client site, wherein the secret information is not included in the request; verifying, by the sign-on service, that a sender of the request is actually the client site registered with the sign-on service based at least in part on the secret information used in generating the digital signature matching the stored copy at the sign-on service of the secret information associated with the client site; determining, by the sign-on service, that the sign-on information for the first user included in the request is valid by matching the included sign-on information with the stored sign-on information for the first user; performing, by the sign-on service based on the verifying and on the determining that the sign-on information is valid, a sign-on of the first user to the sign-on service; generating, by the sign-on service, a credential to represent the first user in future interactions between the sign-on service and the client site by retrieving previously stored information specific to the first user to include in the credential, and providing the credential from the sign-on service to the client site; receiving, by the sign-on service after the providing of the credential to the client site, a second electronic request from the client site that includes the credential and that is to obtain indicated functionality for the first user; and initiating, by the sign-on service and based at least in part on the credential included in the second electronic request, providing the indicated functionality for the first user.