System and method for securing authentication information in a networked environment

A computer program product comprising at least one non-transitory computer readable medium storing instructions translatable by at least one processor to perform:

• encrypting, at a client device operated by a first party using a public key, original authentication information provided by the first party at the client device to generate encrypted authentication information, wherein the public key and instructions for encrypting the authentication information were provided by a cloud based service operated by a second party in response to an access to the cloud based service by the client device operated by the first party;
• providing the encrypted authentication information from the client device to the cloud based service operated by the second party;
• providing the encrypted authentication information from the cloud based service to an on-premises component residing behind a firewall of an enterprise operated by a third party distinct from the first party and second party;
• decrypting the encrypted authentication information at the on-premises component using a private key corresponding to the public key provided by the cloud based service operated by the second party to obtain the original authentication information;
• performing a validation on the original authentication information by the on-premises component;
• and
• returning, by the on-premises component, a result of the validation to the cloud based service over a network, wherein the result is signed by the on-premises component using the private key such that the cloud based service operated by the second party can verify the result was sent by the on-premises component behind the firewall of the enterprise operated by the third party.

A system, comprising:

• at least one processor;
• and
• at least one non-transitory computer readable medium storing instructions translatable by the at least one processor to perform:
• encrypting, at a client device operated by a first party using a public key, original authentication information provided by the first party at the client device to generate encrypted authentication information, wherein the public key and instructions for encrypting the authentication information were provided by a cloud based service operated by a second party in response to an access to the cloud based service by the client device operated by the first party;
• providing the encrypted authentication information from the client device to the cloud based service operated by the second party;
• providing the encrypted authentication information from the cloud based service to an on-premises component residing behind a firewall of an enterprise operated by a third party distinct from the first party and second party;
• decrypting the encrypted authentication information at the on-premises component using a private key corresponding to the public key provided by the cloud based service operated by the second party to obtain the original authentication information;
• performing a validation on the original authentication information by the on-premises component;
• and
• returning, by the on-premises component, a result of the validation to the cloud based service over a network, wherein the result is signed by the on-premises component using the private key such that the cloud based service operated by the second party can verify the result was sent by the on-premises component behind the firewall of the enterprise operated by the third party.