# US 10,484,376 B1 · Authenticating a user device associated with a user to communicate via a wireless network in a secure web-based environment > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,376 B1 - Document ID: US10484376B1 - Status: Granted - Kind: B1 - Application number: 16/028,124 - Filed: 2018-07-05 - Granted: 2019-11-19 - Earliest claimed: 2015-01-26 - Assignees: Winklevoss IP, LLC - Applicants: Winklevoss IP, LLC - Inventors: Andrew Laucius; Cem Paya; Eric Winer - Web page: https://patentgrep.com/patent/US10484376B1 ## CPC - H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity} - G06F 21/41: where a single sign-on provides access to a plurality of computers - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - H04L 9/321: {involving a third party or a trusted authority} - H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC} - H04L 9/3247: {involving digital signatures} - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/0815: {providing single-sign-on or federations} - H04L 63/123: {received data contents, e.g. message integrity} - H04L 9/0637: {Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]} - H04L 63/126: {the source of the received data} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Particular systems, methods, and program products for web-based security systems for user authentication and processing in a distributed computing environment are disclosed. A computing sub-system may receive an electronic processing request and a first signed data packet having a first payload that was hashed and encrypted using a first private key. The first payload may comprise first processing output and a first timestamp. The sub-system may verify the first signed data packet by decrypting it using a first public key. The sub-system may execute computing operations to satisfy the electronic processing request, producing second processing output. The sub-system may configure a data packet with a second payload comprising at least the second processing output and a second timestamp. The sub-system may encrypt the second payload using a second private key producing a second signed data packet. The sub-system may transmit to a second sub-system the second signed data packet. ## Claims ### Claim 1 A method for authenticating a user device associated with a user to communicate via a wireless network in a secure web-based environment comprising: (a) receiving, via a secure transmission in the wireless network, from the user device associated with the user at a first server subsystem associated with a first ip address, an electronic login request comprising login credential data comprising an alphanumeric text sequence; (b) verifying, by the first server subsystem, the login credential data is valid login credential data, wherein the login credential data is verified if the login credential data is valid login credential data; (c) in the case where the login credential data is verified, generating, at the first server subsystem: (1) a first payload used to authenticate the user device associated with the user, comprising login credential verification information and a first session identifier; and (2) a first digital signature of the first server subsystem comprising a first hash of the first payload, the first hash being encrypted using a first identity provider sub-system private key; (d) transmitting, from the first server subsystem to the user device via the secure transmission over the wireless network, the first payload and the first digital signature; (e) receiving, from the user device via the secure transmission over the wireless network at the first server subsystem: (1) a second payload comprising the first session identifier and a first one-time token generated by the user device using a shared secret seed; and (2) a second digital signature of the user device comprising a second hash of the second payload; (f) verifying, by the first server subsystem, the second payload including the first session identifier and the one-time token; (g) in the case where the second payload is verified, authorizing, by the first server subsystem, the user device to communicate with a second server subsystem associated with a second ip address via the first server subsystem; and (h) securely transmitting, from the user device via the secure transmission over the wireless network and the first server subsystem to the second server subsystem, a third payload, and a third digital signature. ### Claim 2 (depends on 1) The method of claim 1, wherein the alphanumeric text sequence comprises a phone number associated with the user device associated with the user. ### Claim 3 (depends on 1) The method of claim 1, wherein the alphanumeric text sequence comprises user device information, the user device information being associated with the user device. ### Claim 4 (depends on 3) The method of claim 3, wherein the user device information comprises a serial number of the user device. ### Claim 5 (depends on 1) The method of claim 1, wherein the secure transmission is using secure socket protocol. ### Claim 6 (depends on 1) The method of claim 1, wherein the first session identifier comprises time stamp information. ### Claim 7 (depends on 1) The method of claim 1, wherein the first session identifier is generated by the first server subsystem using time stamp information. ### Claim 8 (depends on 7) The method of claim 7, wherein the time stamp information comprises a time at which the first payload was generated. ### Claim 9 (depends on 7) The method of claim 7, wherein the time stamp information comprises a time at which the first payload was configured. ### Claim 10 (depends on 7) The method of claim 7, wherein the time stamp information comprises a time at which the electronic request was received. ### Claim 11 (depends on 1) The method of claim 1, wherein the third payload comprises the first session identifier, the first one-time token, and a second one-time token generated by the user device using the shared secret seed.