Aggregator technology without usernames and passwords

What is this patent about?

’715 is related to the field of automated identity and access management, specifically focusing on single sign-on (SSO) systems that aggregate multiple web applications. It addresses the friction and security risks associated with managing numerous sets of credentials across disparate platforms, particularly in environments where external partners or social identities are used to access internal organizational resources.

The underlying idea behind ’715 is to decouple the user's public social identity from a highly secure, system-generated private identity that remains completely hidden from the user. By mapping a familiar social login to a secret, complex internal credential, the system eliminates the need for users to remember or manage passwords for individual aggregated applications while maintaining a robust security layer through secondary verification.

The claims of ’715 focus on a method and system that utilizes an LDAP server to manage the mapping between a social login username and a secret internal profile. The process involves receiving a social identity, identifying corresponding private data, and issuing a formatted challenge—such as a biometric request or social information query—to verify the user before granting access to a dashboard of all their linked accounts.

In practice, the invention functions as a social federation gateway that streamlines the onboarding of new devices and users. When a user attempts to log in via an unrecognized provider, the system performs a metadata-based lookup to suggest candidate identities, effectively bridging different social personas to the same internal secret account. This allows for a 'one-click' launch experience for any registered web application without the user ever interacting with the underlying passwords.

This approach differs from traditional federation technologies by removing the high maintenance and configuration overhead typically required for each partner organization. By utilizing a secret username and password generated by the system and stored in a distributed cloud database, the invention ensures that even if a user's social account is used for entry, the actual authentication to the target applications relies on credentials that are inaccessible to the end user, thereby reducing the attack surface for credential theft.