Access to physical resources based through identity provider
AssigneeVMware, Inc.
InventorsGerard Murphy, Anantha Kalyan Kumar Mulampaka, Divyankitha Mahesh Urs, Yijia Zhao
Life of this patent
Estimating the term…
Abstract
Disclosed are various approaches for providing a virtual badge credential to a user's device that is enrolled with a management service as a managed device. Upon authentication of a user's identity via an identity provider, a virtual badge credential can be provided to an application on the client device. The virtual badge credential can be presented by the client device to access control readers to gain access to physical resources, such as doors and buildings, that are secured by the access control readers.
Claims20
A system for accessing a physical resource comprising:
- a client device comprising a processor and a memory;
- and
- a physical access application executable by the client device, the physical access application causing the client device to at least:
- initiate authentication of a user account with an identity provider associated with an enterprise;
- in response to authentication of the user account, obtain a virtual badge credential on behalf of the user account;
- store the virtual badge credential in storage accessible to the physical access application;
- initiate a personal area network session with an access control reader associated with the physical resource;
- and
- provide an encrypted virtual badge credential generated from the virtual badge credential to the access control reader over the personal area network session, wherein the access control reader determines that access to the physical resource is granted based upon the encrypted virtual badge credential.
A method comprising:
- initiating authentication of a user account with an identity provider associated with an enterprise;
- in response to authentication of the user account, obtaining a virtual badge credential on behalf of the user account;
- storing the virtual badge credential in storage accessible to a physical access application on a client device;
- initiating a personal area network session with an access control reader associated with a physical resource;
- and
- providing an encrypted virtual badge credential generated from the virtual badge credential to the access control reader over the personal area network session, wherein the access control reader determines that access to the physical resource is granted based upon the encrypted virtual badge credential.
A non-transitory computer-readable medium comprising machine-readable instructions, wherein when executed by a processor of at least one computing device, the machine-readable instructions cause the at least one computing device to at least:
- initiate authentication of a user account with an identity provider associated with an enterprise;
- in response to authentication of the user account, obtain a virtual badge credential on behalf of the user account;
- store the virtual badge credential in storage accessible to a physical access application executed by the at least one computing device;
- initiate a personal area network session with an access control reader associated with a physical resource;
- and
- provide an encrypted virtual badge credential generated from the virtual badge credential to the access control reader over the personal area network session, wherein the access control reader determines that access to the physical resource is granted based upon the encrypted virtual badge credential.
Dependencies are inferred from the claim text.