Back to results
US 11,706,210 B2Granted
Computing connection credential verification
OwnerRichard Defilippo, Himanshu Parihar +2inventors
InventorsRichard Defilippo, Himanshu Parihar, Krishit Vimal Shah, Ullas Shamasundar
Life of this patent
Estimating the term…
Abstract
A computing device may include a memory and a processor configured to cooperate with the memory to establish a connection with a client device, with the client device having a first credential to connect the client device to a computing service, and the first credential being provided by a proxy. The processor may further receive a request from the client device via the connection to validate the first credential before use of the first credential by the client device, and validate the first credential with use of a second credential for the computing service obtained independent of the proxy.
Claims21
A computing device comprising:
- a memory and a processor configured to cooperate with the memory to:
- establish a connection with a client device using public key pinning, the client device having a first credential provided to it by a proxy for connecting the client device to a computing service,
- receive a request from the client device via the connection to validate the first credential before the client device uses the first credential to connect to the computing service via the proxy,
- responsive to the request from the client device, retrieve a second credential for the computing service from a verified credential source and without communicating through the proxy,
- compare the first credential and the second credential to verify that the first credential provided by the proxy is valid and the proxy is a legitimate source,
- connect the client device to the computing service via the proxy using the first credential responsive to validation of the first credential and the proxy, and
- terminate a connection with the proxy responsive to a failure to validate the first credential and the proxy.
4 more elements
A method comprising:
- establishing a connection between a computing device and a client device using public key pinning, the client device having a first credential provided to it by a proxy for connecting the client device to a computing service;
- receiving a request at the computing device from the client device via the connection to validate the first credential before the client device uses the first credential to connect to the computing service via the proxy;
- responsive to the request from the client device, retrieve a second credential for the computing service from a verified credential source and without communicating through the proxy;
- comparing, at the computing device, the first credential and the second credential to verify that the first credential provided by the proxy is valid and the proxy is a legitimate source;
- connecting the client device to the computing service via the proxy using the first credential responsive to validation of the first credential and the proxy;
- and
- terminating a connection with the proxy responsive to a failure to validate the first credential and the proxy.
4 more elements
A computing device comprising:
- a memory and a processor configured to cooperate with the memory to:
- receive a first credential provided by a proxy for connecting the computing device to a computing service using public key pinning,
- generate a request for a second credential for the computing service, the second credential being obtained from a verified credential source and without communicating through the proxy,
- compare the first credential and the second credential before use of the first credential to verify that the first credential provided by the proxy is valid and the proxy is a legitimate source,
- connect the computing device to the computing service via the proxy using the first credential responsive to validation of the first credential and the proxy;
- and
- terminate a connection with the proxy responsive to a failure to validate the first credential and the proxy.
4 more elements
A method comprising:
- receiving a first credential at a computing device provided by a proxy for connecting the computing device to a computing service using public key pinning,
- generating, at the computing device, a request for a second credential for the computing service, the second credential being obtained from a verified credential source and without communicating through the proxy,
- comparing the first credential and the second credential at the computing device before use of the first credential to verify that the first credential provided by the proxy is valid and the proxy is a legitimate source,
- connecting the computing device to the computing service via the proxy using the first credential responsive to validation of the first credential and the proxy;
- and
- terminating a connection with the proxy responsive to a failure to validate the first credential and the proxy.
3 more elements
Dependencies are inferred from the claim text.