PATENT CLAIM ANALYSIS

Application Number: 16011769
Application Type: Utility
Filing Date: 2018-06
Publication Date: 2018-10
Patent Classification: ["726", "007000"]

Abstract:
A system and method for using a single-use password to add SSO functionality to a service of a Service Provider belonging to an F-SSO federation that does not support F-SSO functionality for the service. In response to receiving notification from an Identity Provider that a user has requested access to the service, the Service Provider uses information provided by the Identity Provider to identify and authenticate the user, and then uses standard API calls to create and send a temporary password to the user. This password may be created as a function of the user's physical location or IP address and may be communicated out-of-band. Upon determining that the user has correctly returned the temporary password to the Service Provider, the Service Provider generates and sends the user a strong single-use password through a secure in-band communication, through which the user may access the service.

Claim (Index 1):
A method for using an out-of-band password to provide enhanced SSO functionality, the method comprising:\n a processor of a computer system receiving notice of a user's access request from an Identity Provider (IDP) of a Federated Single Sign-On (F-SSO) federation, where the access request requests access to a service provided by a Service Provider (SP) of the federation, and where the federation does not support Single Sign-On functionality for that service; the processor, in response to receiving the notice, identifying and authenticating the user; the processor, in response to the authentication, sending a temporary password to the user through an out-of-band communications mechanism; the processor directing the user to sign onto the service by entering the temporary password and concurrently performing an additional authentication procedure; the processor detecting that the user has correctly entered the temporary password and performed the additional authentication procedure; the processor generating a single-use password; the processor communicating the single-use password to the user on a device under control of the Service Provider through a secured communication in a medium under control of the Service Provider; and the processor requiring the user to replace the temporary password with the single-use password when further accessing the service.

Metadata:
- Claim Count in Document: 50.0
- Percentile: 94.0
- Lexical Diversity: 2.0
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15685794', '14950262', '14950394', '15795957', '12959413']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2963865752784712
- 35 USC 102 Novelty (BERT): 0.6078418635327296
- Combined Prediction Score: 0.327532104103897
- Mean Citation Score: 411.785392
- Max Citation Score: 520.3145
- Similarity Product: 514.5424545377492

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test