System and method for providing a certificate for network access

A method of providing a certificate for certificate based network access in response to a third party request comprising:

• identifying a first system having at least one processor and a plurality of users, each user having at least one attribute;
• receiving from a third party at least one required attribute for certificate based network access;
• receiving from a user known to the first system a request for OSI Layer 2-3 network access to a second system having at least one processor and distinct from the first system, the request having at least one identifier;
• querying the first system with the at least one identifier for attributes associated with the user requesting the certificate based network layer network access to a second system;
• evaluating the attributes associated with the user requesting the certificate to the at least one predefined attribute;
• and
• in response to at least one attribute associated with the user requesting the certificate correlating to the at least one predefined attribute, providing from a system other than the first system, a certificate with at least one characteristic for certificate based OSI Layer 2-3 network access on the second system to the requesting user.

A non-transitory machine readable medium on which is stored a computer program for providing a certificate for certificate based network access in response to a user request for network access, the computer program comprising instructions which when executed by a computer system having at least one processor performs the steps of:

• identifying a first system having at least one processor and a plurality of users, each user having at least one attribute;
• receiving from a third party at least one required attribute for certificate based network access;
• receiving from a user known to the first system a request for certificate based network layer network access to a second system having at least one processor, the request having at least one identifier;
• querying the first system with the at least one identifier for attributes associated with the user requesting the certificate based network layer network access to a second system;
• evaluating the attributes associated with the user requesting the certificate to the at least one predefined attribute;
• and
• in response to at least one attribute associated with the user requesting the certificate correlating to the at least one predefined attribute, providing from a system other than the first system, as requested by the user a certificate with at least one characteristic for certificate based network layer network access on the second system, the second system distinct from the first system.

A non-transitory machine readable medium on which is stored a computer program for providing a certificate for certificate based network access in response to a user request for network access, the computer program comprising instructions which when executed by a computer system having at least one processor performs the steps of:

• an input routine operative associated with an input device for receiving from a third party at least one predefined required attribute as criteria for receiving a certificate for certificate based network access, and for receiving from a user authenticated to a remote first system a request for certificate based network access to a second system, the request having at least one identifier;
• a query routine for querying the first system with the at least one identifier for attributes associated with the user requesting the certificate based network access, the querying performed by other than one of the user requesting the certificate;
• and
• an output routine for providing by other than the remote first system, as requested by the user a certificate with at least one characteristic for certificate based network layer network access on the second system, the second system distinct from the first system.

A system for providing a certificate for certificate based network access in response to a third party request comprising:

• a first system having at least one processor structured and arranged as a single sign on system having a plurality of user accounts corresponding to a plurality of remote users;
• a third party structured and arranged to establish at least one predefined required attribute for receiving a certificate permitting network access on a second system having at least one processor, the second system distinct from the first system;
• and
• an authorizing system structured and arranged to receive from the third party the at least one predefined attribute, and in response to a request from a user of the first system for a certificate for certificate based network access to the second system the authorizing system further structured and arranged to access the first system to query the remote user accounts for attributes associated with at least one user, the authorizing system providing a certificate with at least one characteristic derived from the attributes associated with the user for certificate based network layer network access on the second system to at least one user having at least one attribute associated with the user correlated to the at least one predefined attribute.