# US 2025/0211451 A1 · Secure architecture for 3rd-party management of organizational application resources

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2025/0211451 A1
- Document ID: US20250211451A1
- Status: Published application
- Kind: A1
- Application number: 18/988,705
- Filed: 2024-12-19
- Published: 2025-06-26
- Earliest claimed: 2023-12-21
- Assignees: AponoTech Ltd.
- Applicants: AponoTech Ltd.
- Inventors: Ofir STEIN
- Web page: https://patentgrep.com/patent/US20250211451A1

## CPC

- H04L 9/3247: {involving digital signatures}
- H04L 9/0838: {Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these (network architectures or network communication protocols for key exchange in a packet data network H04L63/061)}
- H04L 9/3273: {for mutual authentication (network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869)}
- H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A system of compromise-resistant configuration of an application, comprising a processing circuitry configured to: utilize an authenticated secure communication channel to a configuration agent that has access to one or more secrets associated with an organization, usable for configuring respective applications of the organization; receive, from a user, a request of configuration of an application, the request including a cryptographic signature of a user of the organization, the signature utilizing a key derivative of a mutual authentication between the user and the configuration agent; derive, from the received request of configuration application configuration commands; transmit, to the application configuration agent, via the authenticated secure communication channel: the request of configuration of the first user, wherein the request comprises the cryptographic signature, and the derived application configuration commands; thereby providing an attestation of integrity of the commands.

## Claims

### Claim 1

A system of compromise-resistant configuration of an application, the system comprising a processing circuitry configured to:
a) utilize an authenticated secure communication channel to a configuration agent, the configuration agent having access to one or more secrets, associated with a first organization, usable for configuring respective applications of the first organization;
b) receive, from a first user, a request of configuration of an application, the request including a cryptographic signature of a first user of the first organization, the signature utilizing a key derivative of a mutual authentication between the first user and the configuration agent;
c) derive, from the received request of configuration of the first user, a one or more application configuration commands;
d) transmit, to the application configuration agent, via the authenticated secure communication channel, at least:
i) at least part of the request of configuration of the first user, wherein the at least part of the request comprises the cryptographic signature, and
ii) at least one of the derived application configuration commands;
thereby providing an attestation of integrity to application configuration commands.

### Claim 2

A processing circuitry-based method of compromise-resistant configuration of an application, the method comprising:
a) utilizing an authenticated secure communication channel to a configuration agent, the configuration agent having access to one or more secrets, associated with a first organization, usable for configuring respective applications of the first organization;
b) receiving, from a first user, a request of configuration of an application, the request including a cryptographic signature of a first user of the first organization, the signature utilizing a key derivative of a mutual authentication between the first user and the configuration agent;
c) deriving, from the received request of configuration of the first user, a one or more application configuration commands;
d) transmitting, to the application configuration agent, via the authenticated secure communication channel, at least:
i) at least part of the request of configuration of the first user, wherein the at least part of the request comprises the cryptographic signature, and
ii) at least one of the derived application configuration commands;
thereby providing an attestation of integrity to application configuration commands.

### Claim 3

A computer program product comprising a computer readable non-transitory storage medium containing program instructions, which program instructions when read by a processor, cause the processing circuitry to perform a method of compromise-resistant configuration of an application, the method comprising:
a) utilizing an authenticated secure communication channel to a configuration agent, the configuration agent having access to one or more secrets, associated with a first organization, usable for configuring respective applications of the first organization;
b) receiving, from a first user, a request of configuration of an application, the request including a cryptographic signature of a first user of the first organization, the signature utilizing a key derivative of a mutual authentication between the first user and the configuration agent;
c) deriving, from the received request of configuration of the first user, a one or more application configuration commands;
d) transmitting, to the application configuration agent, via the authenticated secure communication channel, at least:
i) at least part of the request of configuration of the first user, wherein the at least part of the request comprises the cryptographic signature, and
ii) at least one of the derived application configuration commands;
thereby providing an attestation of integrity to application configuration commands.

### Claim 4

A system of compromise-resistant configuration of an application, the system comprising a processing circuitry configured to:
a) maintain application-specific configuration secrets of a first organization, and utilize an authenticated secure communication channel to a manager;
b) perform mutual authentication to establish a secure association with a first user of the first organization;
c) receive, from the manager, at least:
i) a request of the first user of application configuration, the request including a cryptographic signature of the first user, and
ii) one or more commands of configuring a first application;
d) responsive to:
i) based on the secure association with the first user, cryptographically verifying the first user as the origin of the request, and verifying the message integrity of the request, and that the signature of the request is of the first user, and
ii) verifying that the one or more commands of configuring are technically appropriate to performing the received request of the first user,
utilize a secret specific to the first application to configure the first application, in accordance with the one or more commands.

### Claim 5 (depends on 2)

The system of claim 2, wherein the processing circuitry is further configured to:
e) receive a credential from the first application;
f) encrypt the credential using an encryption key decryptable by the first user; and
g) transmit the encrypted credential to the management system via the secure authenticated channel.

### Claim 6

A processing circuitry-based method of compromise-resistant configuration of an application, the method comprising:
a) maintaining application-specific configuration secrets of a first organization, and utilizing an authenticated secure communication channel to a manager;
b) performing mutual authentication to establish a secure association with a first user of the first organization;
c) receiving, from the manager, at least:
i) a request of the first user of application configuration, the request including a cryptographic signature of the first user, and
ii) one or more commands of configuring a first application;
d) responsive to:
i) based on the secure association with the first user, cryptographically verifying the first user as the origin of the request, and verifying the message integrity of the request, and that the signature of the request is of the first user, and
ii) verifying that the one or more commands of configuring are technically appropriate to performing the received request of the first user,
utilizing a secret specific to the first application to configure the first application, in accordance with the one or more commands.

### Claim 7

A computer program product comprising a computer readable non-transitory storage medium containing program instructions, which program instructions when read by a processor, cause the processing circuitry to perform a method of compromise-resistant configuration of an application, the method comprising:
a) maintaining application-specific configuration secrets of a first organization, and utilizing an authenticated secure communication channel to a manager;
b) performing mutual authentication to establish a secure association with a first user of the first organization;
c) receiving, from the manager, at least:
i) a request of the first user of application configuration, the request including a cryptographic signature of the first user, and
ii) one or more commands of configuring a first application;
d) responsive to:
i) based on the secure association with the first user, cryptographically verifying the first user as the origin of the request, and verifying the message integrity of the request, and that the signature of the request is of the first user, and
ii) verifying that the one or more commands of configuring are technically appropriate to performing the received request of the first user.
utilizing a secret specific to the first application to configure the first application, in accordance with the one or more commands.