Systems and methods for locally conducting delegated authentication at edge nodes

An edge node of a managed network, the edge node comprising:

• at least one hardware processor;
• and
• one or more non-transitory computer-readable storage media containing instructions that, when executed by the at least one hardware processor, cause the at least one hardware processor to perform operations comprising:
• receiving, from an authentication system of the managed network, authentication information for each user in a subset of one or more users from among a plurality of users of the managed network, the authentication information comprising a first-user segment specific to a first user in the subset;
• storing the authentication information in data storage at the edge node;
• receiving a first authentication request from a first user device, both the first authentication request and the first user device being associated with the first user, the first authentication request comprising presented authentication information, wherein a smart car comprises the first user device, a second user device comprises the edge node, and the second user device is a mobile device;
• determining whether each of a set of one or more authentication criteria is met for the first authentication request, and if so then performing a set of authenticating operations responsive to the first authentication request, the set of one or more authentication criteria comprising the presented authentication information matching the first-user segment of the stored authentication information, the set of authenticating operations comprising authenticating the first user with respect to the managed network and further comprising establishing a first authenticated session for the first user at the edge node;
• and
• subsequent to establishing the first authenticated session for the first user at the edge node:
• receiving, from the first user device, a request for an authenticated payment token for a transaction with a merchant;
• generating the requested authenticated payment token;
• and
• providing the requested authenticated payment token to one or both of the first user device and the merchant.

One or more non-transitory computer-readable storage media containing instructions that, when executed by at least one hardware processor of an edge node of a managed network, cause the at least one hardware processor to perform operations comprising:

• receiving, from an authentication system of the managed network, authentication information for each user in a subset of one or more users from among a plurality of users of the managed network, the authentication information comprising a first-user segment specific to a first user in the subset;
• storing the authentication information in data storage at the edge node;
• receiving a first authentication request from a first user device, both the first authentication request and the first user device being associated with the first user, the first authentication request comprising presented authentication information, wherein a smart car comprises the first user device, a second user device comprises the edge node, and the second user device is a mobile device;
• determining whether each of a set of one or more authentication criteria is met for the first authentication request, and if so then performing a set of authenticating operations responsive to the first authentication request, the set of one or more authentication criteria comprising the presented authentication information matching the first-user segment of the stored authentication information, the set of authenticating operations comprising authenticating the first user with respect to the managed network and further comprising establishing a first authenticated session for the first user at the edge node;
• and
• subsequent to establishing the first authenticated session for the first user at the edge node:
• receiving, from the first user device, a request for an authenticated payment token for a transaction with a merchant;
• generating the requested authenticated payment token;
• and
• providing the requested authenticated payment token to one or both of the first user device and the merchant.