SECURELY AUTHENTICATING A BOT USER

• Main Authors: SOLIS ADRIAN ORBITA, JIN LARRY, YU MAO, UPPAL SIDDHARTH, DOGANDJIEV YURI GEORGIEV
• Format: Patent
• Language: Chinese; English
• Published: 24.12.2019
• Subjects: CALCULATING; COMPUTING; COUNTING; ELECTRIC COMMUNICATION TECHNIQUE; ELECTRIC DIGITAL DATA PROCESSING; ELECTRICITY; PHYSICS; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

Systems and methods are provided that securely authenticate a user of a web application. For example, the user may utilize a bot from within a first application, such as a chat application. The user may request the bot to access a second application (e.g., a social-networking application) that is remote from the first application. If the bot does not have authorization, the bot may redirect the user to a webpage for the second application, where the user may enter login credentials. Upon verification, the second application may provide an access token to a webpage associated with the bot. To authenticate the bot user, the bot webpage may generate and cache a nonce that is transmitted back to the first application, which then transmits it to the bot. The bot may then compare the received nonce with the cached nonce. If the nonces match, the user may be securely authenticated. 提供了安全认证网络应用程序的用户的系统和方法。例如，用户可以利用来自诸如聊天应用程序之类的第一应用程序内的自动程序。用户可以请求自动程序访问远离第一应用程序的第二应用程序(例如，社交网络应用程序)。如果自动程序没有授权，则自动程序可以将用户重定向到第二应用程序的网页，用户