Secure authorization systems and methods
AssigneeIntertrust Technologies Corporation
InventorsPeng YANG, Jiahua GONG, Chitai Kenny HUANG
Life of this patent
Estimating the term…
Abstract
Systems and methods for secure user authentication are described. In certain embodiments, a client device such as a smartphone may be provisioned with a secure key and/or other secret information. The client device may be used to generate unique secure tokens and/or other credentials used in connection with an authentication process. A user may provide the generated tokens and/or other credentials to a service provider in connection with a request to access a managed service. The validity of the generated tokens and/or other credentials may be verified by an authentication service in communication with the service provider.
Claims21
-11. (canceled)
A method performed by a service provider system for authenticating the right of a user to access a resource managed by the service provider system, the method comprising:
- receiving authentication credentials provided to the service provider system by the user, the authentication credentials comprising a first secure token generated by a client device associated with the user, wherein the client device includes software configured to securely store a first secure key used to generate the first secure token;
- retrieving, based on the authentication credentials, a second secure key;
- generating, using the second secure key and other information common to the service provider system and the client device, a second secure token;
- comparing the first secure token with the second secure token;
- generating an authentication result based on a result of the comparison;
- and
- transmitting the authentication result to the service provider system.
Dependencies are inferred from the claim text.