US 11,689,537 B2Granted

Providing flexible service access using identity provider

OwnerDipti Vivek Shiralkar, Arun Thotta Suresh +2inventors

InventorsDipti Vivek Shiralkar, Arun Thotta Suresh, Mohammad Rahimi, Ankit Garg

Life of this patent

Estimating the term…

Loading patent…

Abstract

A service provider provides flexible access to services using an identity provider. The service provider is associated with a custom access policy used by the identity provider to authenticate access requests associated with client devices for services of the client system. The custom access policy describes a set of access levels corresponding to variable levels of access to services of the service provider. The identity provider authenticates access requests by client devices using one or more device signals from the client devices. In some embodiments, the identity provider determines a device trust score for the client device using the one or more device signals. The identity provider provides an authentication response to the client system based on the custom access policy. The client system uses the authentication response to determine an access level for the client device from the set of access levels described by the custom access policy.

Claims16

Dependent claims

A computer-implemented method executed by a service provider device, the computer-implemented method comprising:

receiving, from a client device, an access request for one or more services of a service provider;
requesting, by the service provider device, authentication of the access request by an identity provider using a custom access policy, the custom access policy describing a plurality of access levels including at least a limited access level and a full access level;
receiving, from the identity provider, an authentication response for the access request, the authentication response including a device trust score for the client device determined by a machine learning device trust score model that receives using one or more device signals of the client device as input, the machine learning device trust score model trained using at least one of:
supervised neural networks, support vector machines, linear regression, logistic regression, decision trees, or unsupervised neural networks;
determining an access level, of the plurality of access levels, for the client device using the authentication response;
and
determining whether to provide the client device access to the one or more services in accordance with the determined access level.

4 more elements

A non-transitory computer-readable storage medium comprising executable instructions that, when executed by a computer processor of a service provider device, perform actions comprising:

receiving, from a client device, an access request for one or more services of the service provider;
requesting, by the service provider device, authentication of the access request by an identity provider using a custom access policy, the custom access policy describing a plurality of access levels including at least a limited access level and a full access level;
receiving, from the identity provider, an authentication response for the access request, the authentication response including a device trust score for the client device determined by a machine learning device trust score model that receives one or more device signals of the client device as input, the machine learning device trust score model trained using at least one of:
supervised neural networks, support vector machines, linear regression, logistic regression, decision trees, or unsupervised neural networks;
determining an access level, of the plurality of access levels, for the client device using the authentication response;
and
determining whether to provide the client device access to the one or more services in accordance with the determined access level.

4 more elements

Dependencies are inferred from the claim text.