Apparatus and method for shared credential authentication

An authentication system for providing shared credential authentication, the authentication system comprising:

• a client information handling system (IHS) including a resource and a first processor to provide a resource service application;
• and
• a mobile information handling system (IHS) including a second processor to provide a shared authentication application;
• wherein:
• the client IHS authenticates, via a primary authentication server, a user of the client IHS to access the client IHS, wherein the primary authentication server is an Active Directory server;
• the resource service application receives a request to access the resource, and sends an authentication request to a secondary authentication server to authorize access to the resource;
• the shared authentication application receives a query from the secondary authentication server to verify a status of a first shared authentication token, and when the first shared authentication token is valid, responds to the query that the first shared authentication token is valid, the first shared authentication token indicating that an authenticated state between the client IHS and the mobile IHS exists;
• the resource service application further receives a response to the authentication request, and grants access to the resource when the first shared authentication token indicates that the first shared authentication token is valid;
• the client IHS further provides a first authentication application;
• the mobile IHS further provides a second authentication application;
• the first and second authentication applications determine whether or not the client IHS and the mobile IHS are communicatively coupled;
• the second authentication application
• i) requests authentication credentials from the first authentication application, the authentication credentials authenticating that the client IHS is authorized to utilize the mobile IHS,
• ii) receives the authentication credentials,
• iii) creates an authentication key that represents that the client IHS is authorized to utilize the mobile IHS based upon the authentication credentials,
• iv) and creates a second shared authentication token and a hash thereof based on the authentication key, and after creating the second shared authentication token,
• v) invalidates the second shared authentication token in response to determining that the client IHS and the mobile IHS are not communicatively coupled.