US 9,438,633 B1Granted

System, method and computer program product for providing unified authentication services for online applications

AssigneeCitibank, N.A.

InventorsBikram S. Bakshi, David W. Helms, Anthony C. Rochon, Trevor J. Walker

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system and method remotely enrolls, authenticates and provides unified authentication services in an ASP setting to a user to access requested information via a communication medium. A filter is coupled to client side components via the communication medium and a user management component coupled to the client side components via the communication medium. The user management component allows end-users to register their credentials only once. In addition, the user management component allows end-users to define the level of protection of access to their web application accounts. This includes accounts that have been configured specifically for use with the present invention and particular user credentials and accounts that have been subsequently set up but configured to use the same user credentials. The present invention can then reuse those credentials to authenticate the user to one or more potentially unrelated web applications.

Claims20

Dependent claims

A computer-implemented method comprising:

assigning, by a user management server, a globally unique ID (GUID) for a user;
receiving, by the user management server, a first username for a first website associated with a first account of the user and a second username for a second website associated with a second account of the user;
associating, by the user management server, the first username and the second username with the GUID;
establishing, by the user management server, a first policy component of an authentication server for access to the first account, wherein the first policy component requires a first type of credential for access;
establishing, by the user management server, a second policy component of an authentication server for access to the second account, wherein the second policy component requires a second type of credential for access;
capturing, by the user management server, the first type of credential and the second type of credential;
storing, by the user management component, the first type of credential as the first policy component with the GUID in a database;
storing, by the user management component, the second type of credential as the second policy component with the GUID in the database;
providing, by the user management component, access to the first account of the user when receiving input of the GUID and the first type of credential;
and
providing, by the user management server, access to the second account of the user when receiving input of the GUID and second type of credential,
wherein the first type of credential comprises a first level of protection and the second type of credential requires a second level of protection, the second level of protection requiring the first type of credential and the second type of credential;
and
wherein the first level of protection is defined by the first policy component and the second level or protection is defined by the second policy component.

11 more elements

A system comprising:

a user management processor configured to execute instructions stored on a non-transitory computer-readable medium, the instructions configured to:
assign a globally unique ID (GUID) for a user;
receive a first username for a first website associated with a first account of the user and a second username for a second website associated with a second account of the user;
associate the first username and the second username with the GUID;
establish a first policy component for access to the first account, wherein the first policy component requires a first type of credential for access;
establish a second policy component for access to the second account, wherein the second policy component requires a second type of credential for access;
capture the first type of credential and the second type of credential;
store the first type of credential as the first policy component with the GUID in a database;
store the second type of credential as the second policy component with the GUID in the database;
provide access to the first account of the user when receiving input of the GUID and the first type of credential;
and
provide access to the second account of the user when receiving input of the GUID and second type of credential,
wherein the first type of credential comprises a first level of protection and the second type of credential requires a second level of protection, the second level of protection requiring the first type of credential and the second type of credential;
and
wherein the first level of protection is defined by the first policy component and the second level or protection is defined by the second policy component.

12 more elements

Dependencies are inferred from the claim text.

Facts

Application: 14/684,083Filed 10 Apr 2015 · continuation
Priority: 23 Mar 2000
Granted: 6 Sep 2016
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
G06F 21/335
Using certificates: for accessing specific resources, e.g. using Kerberos tickets
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources

Family

Application60/191,471Us provisional application · filed 23 Mar 2000
Application09/814,971Parent of this continuation · filed 23 Mar 2001
Application12/232,167Parent of this continuation · filed 11 Sep 2008
US 7,441,263 B1Parent of this continuation · filed 21 Oct 2008
US 9,009,798 B2Parent of this continuation · filed 14 Apr 2015
US 2009/0019534 A1Published application
US 9,438,633 B1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key