Secure user credential access system
AssigneeBitglass, Inc.
InventorsAnurag Kahol, Anoop Kumar Bhattacharjya, Balas Natarajan Kausik
Life of this patent
Estimating the term…
Abstract
A proxy server mitigates security risks of user credentials sent across a network in clear text. The proxy server encrypts user credentials within a client application request destined for an application server. The proxy server forwards the client application request to the application server. The application server sends the encrypted user credentials to the proxy server where the proxy server decrypts the user credentials and authenticates the user credentials with an authentication server.
Claims20
A method, comprising:
- receiving, by a first device, an application access request from a client device across a network, the application access request including a request for access to an application and authentication credentials for a user, the authentication credentials are transmitted in clear-text to the first device;
- encrypting, by the first device, the authentication credentials in the application access request, the encrypted authentication credentials only decryptable by the first device;
- sending, by the first device, the received application access request that includes the encrypted authentication credentials to a second device;
- receiving, by the first device, the encrypted authentication credentials from the second device;
- decrypting, by the first device, the encrypted authentication credentials;
- and
- sending, by the first device, the decrypted authentication credentials to an authentication server.
A system, comprising:
- a message receiver, implemented at least partially in hardware at a first device, that receives an application access request from a client device across a network, the application access request including a request for access to an application and authentication credentials for a user, the authentication credentials are transmitted in clear-text to the first device;
- an authentication credential encrypter, implemented at least partially in hardware at the first device, that encrypts the authentication credentials in the application access request, the encrypted authentication credentials only decryptable by the first device;
- a message transmitter, implemented at least partially in hardware at the first device, that sends the received application access request that includes the encrypted authentication credentials to a second device;
- wherein the message receiver receives the encrypted authentication credentials from the second device;
- an authentication credential decrypter, implemented at least partially in hardware at the first device, that decrypts the encrypted authentication credentials;
- and
- wherein the message transmitter sends the decrypted authentication credentials to an authentication server.
One or more non-transitory computer-readable storage media, storing one or more sequences of instructions, which when executed by one or more processors cause performance of:
- receiving, by a first device, an application access request from a client device across a network, the application access request including a request for access to an application and authentication credentials for a user, the authentication credentials are transmitted in clear-text to the first device;
- encrypting, by the first device, the authentication credentials in the application access request, the encrypted authentication credentials only decryptable by the first device;
- sending, by the first device, the received application access request that includes the encrypted authentication credentials to a second device;
- receiving, by the first device, the encrypted authentication credentials from the second device;
- decrypting, by the first device, the encrypted authentication credentials;
- and
- sending, by the first device, the decrypted authentication credentials to an authentication server.
Dependencies are inferred from the claim text.