System for managing multi-user sign-on in a segmented network

A computer program product for providing a multi-user experience on a mobile device in communication with an entity network, the computer program product comprising a non-transitory computer-readable storage medium having computer-executable instructions for:

• receiving a security certificate from the mobile device;
• authenticating the security certificate;
• based on authenticating the security certificate, establishing network communication between the mobile device and a secured network segment;
• receiving a first request from the mobile device to receive first user-specific information for a first application executed by the mobile device from a secured network segment in communication with the entity network, wherein the first request comprises a device identifier and a user identifier associated with a first user;
• authenticating the user identifier associated with the first user;
• associating the user identifier associated with the first user with the device identifier;
• communicating a first response to the mobile device based on authenticating the user identifier associated with the first user;
• receiving a second request from the mobile device to receive second user-specific information associated with the first user for a second application executed by the mobile device from the secured network segment, wherein the second request comprises the device identifier;
• determining that the device identifier is associated with the user identifier associated with the first user;
• communicating a second response to the mobile device based on determining that the device identifier is associated with the user identifier associated with the first user;
• receiving a third request from the mobile device, wherein the third request comprises the device identifier and a second user identifier associated with a second user;
• disassociating the user identifier associated with the first user with the device identifier based on receiving the third request;
• associating the second user identifier with the device identifier based on receiving the third request;
• determining that a pre-defined time period has elapsed after receiving the third request;
• determining that the mobile device has not communicated a subsequent request before the pre-defined period has elapsed;
• and
• disassociating the second user identifier associated with the second user and the device identifier based on determining that the mobile device has not communicated a subsequent request before the pre-defined period has elapsed.

A method for providing a multi-user experience on a mobile device via an entity network, the method comprising:

• receiving a security certificate from the mobile device;
• authenticating the security certificate;
• based on authenticating the security certificate, establishing network communication between the mobile device and a secured network segment;
• receiving, via a computer processor, a first request from the mobile device to receive first user-specific information for a first application executed by the mobile device from a secured network segment in communication with the entity network, wherein the first request comprises a device identifier and a user identifier associated with a first user;
• authenticating, via a computer processor, the user identifier associated with the first user;
• associating, via a computer processor, the user identifier associated with the first user with the device identifier;
• communicating, via a computer processor, a first response to the mobile device based on authenticating the user identifier associated with the first user;
• receiving, via a computer processor, a second request from the mobile device to receive second user-specific information associated with the first user for a second application executed by the mobile device from the secured network segment, wherein the second request comprises the device identifier;
• determining, via a computer processor, that the device identifier is associated with the user identifier associated with the first user;
• communicating, via a computer processor, a second response to the mobile device based on determining that the device identifier is associated with the user identifier associated with the first user;
• receiving, via a computer processor, a third request from the mobile device, wherein the third request comprises the device identifier and a second user identifier associated with a second user;
• disassociating, via a computer processor, the user identifier associated with the first user with the device identifier based on receiving the third request;
• and
• associating, via a computer processor, the second user identifier with the device identifier based on receiving the third request;
• determining, via a computer processor, that a pre-defined time period has elapsed after receiving the third request;
• determining, via a computer processor, that the mobile device has not communicated a subsequent request before the pre-defined period has elapsed;
• and
• disassociating, via a computer processor, the second user identifier associated with the second user and the device identifier based on determining that the mobile device has not communicated a subsequent request before the pre-defined period has elapsed.