Back to results
US 11,777,917 B2Granted
Multi-party cloud authenticator
AssigneeCisco Technology, Inc.
InventorsJeremy Erickson, Nicholas James Mooney, Jordan Matthew Wright, Nicholas Hamilton Steele, Mikhail Davidov
Life of this patent
Estimating the term…
Abstract
This disclosure describes techniques for authenticating one or more devices of a user in association with cloud computing services. The techniques include generating credential portions. The credential portions may be used in a signing protocol between one of the user devices and a cloud authenticator. The signing protocol may generate a signature that may be used in authentication with a cloud computing service. In some cases, the credential portions may be shared with other devices of the user. As such, the cloud authenticate may assist multiple user devices to authenticate with the cloud computing service.
Claims20
A computer-implemented method comprising:
- registering, by a cloud authenticator, a first user device and a second user device with a user account of a user;
- receiving, at the cloud authenticator and from the first user device, a first request to authenticate the user account to an online service;
- initiating generation of a first credential portion and a second credential portion for authenticating the user account with the online service, wherein the first credential portion is retained by the first user device and the second credential portion is retained by the cloud authenticator;
- generating a first signature by participating in a first signing protocol between the cloud authenticator and the first user device, in which the first credential portion is retained by the first user device and the second credential portion is retained by the cloud authenticator;
- providing, by the cloud authenticator, the first signature to a remote device associated with the online service to authenticate the user account to the online service;
- passing an encrypted copy of the first credential portion from the first user device to the second user device;
- receiving, at the cloud authenticator and from the second user device, a second request to authenticate the user account to the online service;
- and
- generating a second signature by participating in a second signing protocol between the cloud authenticator and the second user device, in which the first credential portion is retained by the second user device and the second credential portion is retained by the cloud authenticator.
6 more elements
A cloud computing device comprising:
- one or more processors;
- and
- one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to:
- register a first user device and a second user device with a user account of a user;
- receive, from the first user device, a first request to authenticate the user account to an online service;
- initiate generation of a first credential portion and a second credential portion for authenticating the user account with the online service, wherein the first credential portion is retained by the first user device;
- generate a first signature by participating in a first signing protocol with the first user device, in which the first credential portion is retained by the first user device;
- provide the first signature to a remote device associated with the online service to authenticate the user account to the online service;
- pass an encrypted copy of the first credential portion from the first user device to the second user device;
- receive, from the second user device, a second request to authenticate the user account to the online service;
- and
- generate a second signature by participating in a second signing protocol with the second user device, in which the first credential portion is retained by the second user device.
9 more elements
A method comprising:
- sending, by a first user device and to a cloud authenticator, a first request to access an online service, the first user device associated with a user account at the cloud authenticator;
- participating in generation of a first credential portion and a second credential portion for authenticating the user account with the online service, wherein the first credential portion is retained by the first user device and the second credential portion is retained by the cloud authenticator;
- participating in a signing protocol with the cloud authenticator in which the first credential portion is retained by the first user device and the second credential portion is retained by the cloud authenticator, the signing protocol generating a signature for authenticating to the online service;
- at least partly in response to completing the signing protocol, accessing the online service by the first user device;
- generating, by the first user device, an encrypted copy of the first credential portion, the generating using a public key of a second user device associated with the user account;
- and
- passing the encrypted copy of the first credential portion to the second user device.
4 more elements
Dependencies are inferred from the claim text.