Verisign, Inc.

Hewlett-packard Development Company, L.p.

Mobile Iron, Inc.

Atul Vijay Tulshibagwale

Xinhong Yuan

Kumara Das Karunakaran

Vijay Pawar

Jian Liu

Robert Winslow Pratt

Gregory R Whitehead

Stan J Simon

Jason Rouault

Mahinda K De Silva

Gregory Ryan Whitehead

Techniques are disclosed to provide VPN and identity based authentication to cloud-based services. In various embodiments, a request to authenticate a user to a service is received. A user identity associated with one or both of the user and the request is determined based at least in part on data comprising the request. An identity assertion is generated based at least in part on the user identity. The identity assertion is provided to a requesting node with which the request to authenticate is associated.

Unified VPN and identity based authentication to cloud-based services

A first user () requests a service provider () to create () a record of a transaction. The service provider () creates () a digital receipt (), which includes a description () of the transaction understandable by humans, tamper-proof evidence () of the transaction, and a verification prompt (). A second user () who desires to verify the transaction displays () the digital receipt () and activates () the verification prompt (). Upon activation, the tamper-proof evidence () is verified without requiring further human interaction to identify the tamper-proof evidence.

Digital receipt for a transaction

A data processing system implements push artifact binding for communication in a federated identity system. A federated identity system in the data processing system comprises an initiator that handles a federated action by determining that a user is to be conveyed to a recipient, constructing an appropriate message request or assertion to be sent to the recipient, and sending the message as a push message over a back-channel communication pathway directed to the recipient's location. The federated identity system further comprises a recipient that handles the federated action by responding to the message by forming a Uniform Resource Locator (URL) to which the user can be directed. The initiator redirects the user to the URL specified in the recipient response.

Push artifact binding for communication in a federated identity system

One embodiment relates to a method of managing trust relationships between federated identity and service providers. An assertion of a user identity is received from an identity provider via a first federation protocol, wherein a destination service provider is indicated with the assertion. Permission of the user identity to access the destination service provider is verified. If permission is verified, the user identity is asserted to the destination service provider via a second federation protocol. Other embodiments and features are also disclosed.

Router for managing trust relationships

A local server ( ) locally hosts the provision of digital certificate services to a client ( ); while a central server ( ) provides the actual digital certificate services. The local server ( ) transmits ( ) a custom entry form ( ) to the client ( ). In response to the client's ( ) use of the custom entry form ( ), the client ( ) transmits ( ) a standard request for digital certificate services to a central server ( ), possibly via the local server ( ). The central server ( ) fulfills ( ) the request, generating a standard response. The standard response is transmitted ( ) to the local server ( ), which generates ( ) a custom display of the results contained in the standard response. The custom display is transmitted ( ) to the client ( ), fulfilling the client's request. Information is provided ( ), enabling the local server ( ) to create ( ) appropriate custom entry forms ( ) and to generate ( ) the custom display from the standard response. The communications between local server ( ) and central server ( ) preferably are secured.

Growing community of inventors

Cupertino, CA, United States of America

Atul Vijay Tulshibagwale