US 12,598,190 B2Granted

Unified secure access control to software services and applications

AssigneeSplashtop Inc.

InventorYanlin Wang

Life of this patent

Estimating the term…

Loading patent…

Abstract

Methods and systems of access control to enterprise applications. Embodiments of the invention implement a unified secure access control solution to enable users to securely authenticate with applications no matter whether they are hosted in SAAS cloud or private networks. Intelligence Edge Gateways deployed at a network edge close to users' geographical locations ensure the control of users' secure access to software services and applications with minimized latency. A user only needs one set of credentials to gain access to various applications hosted in SAAS cloud or private networks. In an embodiment, Intelligence Edge Gateways enables IT administrators to set data plane level security policies in addition to the identity and access management policies. IT administrators are able to configure and manage all the security policies at Unified Access Cloud in a centralized manner.

Claims10

Dependent claims

A method for providing access control to enterprise applications, the method comprising:

receiving, by an edge server intermediary to a plurality of clients and a plurality of enterprise application servers, a request from an access agent installed on an application server of the plurality of enterprise application servers, wherein the request is on behalf of a client of the plurality of clients to access an enterprise application hosted on the application server;
determining by the edge server if the request is a login authentication request, wherein the login authentication request contains a tokenized login credential;
in response to a determination that the request is a login authentication request, determining by the edge server if the client is allowed to access the enterprise application based on security policies;
in response to a determination that the client is allowed to access the enterprise application based on the security policies, obtaining by the edge server a pre-configured login credential for the client to access the enterprise application, wherein the pre-configured login credential is provisioned for the client and stored in a password vault manager server;
and forwarding the request by the edge server to the enterprise application after replacing the tokenized login credential in the request with the pre-configured login credential.

2 more elements

A system for providing access control to enterprise applications comprising:

one or more computers;
and a computer-readable, non-transitory medium coupled to said one or more computers having instructions stored thereon which, when executed, cause the one or more computers to perform operations comprising:
receiving, by an edge server intermediary to a plurality of clients and a plurality of enterprise application servers, a request from an access agent installed on an application server of the plurality of enterprise application servers, wherein the request is on behalf of a client of the plurality of clients to access an enterprise application hosted on the application server;
determining by the edge server if the request is a login authentication request, wherein the login authentication request contains a tokenized login credential;
in response to a determination that the request is a login authentication request, determining by the edge server if the client is allowed to access the enterprise application based on security policies;
in response to a determination that the client is allowed to access the enterprise application based on the security policies, obtaining by the edge server a pre-configured login credential for the client to access the enterprise application, wherein the pre-configured login credential is provisioned for the client and stored in a password vault manager server;
and forwarding the request by the edge server to the enterprise application after replacing the tokenized login credential in the request with the pre-configured login credential.

4 more elements

Dependencies are inferred from the claim text.