US 9,288,195 B2Granted

Single sign on with multiple authentication factors

AssigneeSecureAuth Corporation

InventorsMark V. Lambiase, Garret Florian Grajek, Jeffrey Chiwai Lo, Tommy Ching Hsiang Wu

Life of this patent

Estimating the term…

Loading patent…

Abstract

The authentication of a client to multiple server resources with a single sign-on procedure using multiple factors is disclosed. One contemplated embodiment is a method in which a login session is initiated with the authentication system of a primary one of the multiple server resources. A first set of login credentials is transmitted thereto, and validated. A token is stored on the client indicating that the initial authentication was successful, which is then used to transition to a secondary one of the multiple resources. A second set of login credentials is also transmitted, and access to the secondary one of the multiple resources is granted on the basis of a validated token and second set of login credentials.

Claims20

Dependent claims

A method for authenticating a client to multiple server resources each with a standalone authentication system, the method comprising:

initiating a login session with a first standalone authentication system of a primary one of the multiple server resources;
transmitting a first set of login credentials from the client to the first standalone authentication system of the primary one of the multiple server resources;
validating the client by the first standalone authentication system of the primary one of the multiple server resources based upon the first set of login credentials;
storing on the client a token received from the first standalone authentication system of the primary one of the multiple resources, the token being generated by the first standalone authentication system;
transmitting the token and a second set of login credentials different from the first set of login credentials to a secondary one of the multiple server resources, the second set of login credentials being retrieved from the client, wherein the second set of login credentials is transmitted outside of the token and exists on the client prior to the client transmitting the first set of login credentials to the first standalone authentication system;
and
validating the client by a second standalone authentication system of the secondary one of the multiple server resources based upon the transmitted token and the second set of login credentials.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/105,932Filed 13 Dec 2013 · continuation
Priority: 17 Nov 2009
Published: US 2014/0181946 A126 Jun 2014
Granted: 15 Mar 2016
Term ends: Not estimatedThe source records don’t support an estimate.

Classification14 codes

H04L 63/0815
For authentication of entities: providing single-sign-on or federations
G06F 21/335
Using certificates: for accessing specific resources, e.g. using Kerberos tickets
G06F 21/41
User authentication: where a single sign-on provides access to a plurality of computers
H04L 9/3234
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…:…

Family

Application61/262,102Us provisional application · filed 17 Nov 2009
Application12/948,037Parent of this continuation · filed 17 Nov 2010
US 2014/0181946 A1Pre-grant publication · published 26 Jun 2014
US 8,613,067 B2Parent of this continuation
US 2011/0119747 A1Published application
US 9,288,195 B2This patent

From the US filing history. Foreign family members aren’t listed.