Microstrategy, Inc.

Other

John Gehret

Siamak Ziraknejad

Ali Alavi

Gary Gabriel

Xiaochen Du

Yong Qiao

Gang Chen

Terry Berman

Hanna Jung

A method including actions of pairing with a mobile device and receiving a user name, a password encrypted with a connector password key, and a public key of the mobile device. Additional actions include providing the password encrypted with the connector password key, receiving the password in a decrypted form, obtaining a pairing key, encrypting the pairing key using the public key, encrypting the password with a local password key, providing the pairing key encrypted using the public key and the password encrypted with the local password key, disconnecting from the mobile device, after disconnecting form the mobile device, reconnecting with mobile device, providing a workstation identification, receiving the user name and the password encrypted with the local password key, decrypting the password encrypted with the local password key, and logging in the user using the user name and the password decrypted with the local password key.

Workstation log-in

A system enables use of credentials, including determining that a user has been authorized by a first credential-issuing organization and enabling the user to use a first credential issued by the first credential-issuing organization based on the determination that the user has been authorized by the first credential-issuing organization. Trust data indicating whether the user should be enabled to use a second credential issued by a second credential-issuing organization as a result of the user having been authorized by the first credential-issuing organization is accessed. A determination is made that the accessed trust data indicates that the user should be enabled to use the second credential issued by the second credential-issuing organization as a result of the user having been authorized by the first credential-issuing organization, and the user is enabled to use the second credential.

Enabling use of credentials

The subject matter described in this specification includes a computer-readable medium storing instructions that cause one or more processors to perform various operations including receiving, from a first client device associated with a user account of a first user, a request for sharing a key. The key is associated with the user account of the first user, and permits access to a resource. The operations include generating, at a server, one or more representations of the key, transmitting the representations of the key to the first client device, and receiving, from a second client device associated with a user account of a second user, a request to access the key. The request to access the key is derived from one of the one or more representations of the key. The operations further include communicating, to the second client device, a message indicating whether access to the key has been granted.

Sharing keys

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for electronic credential and analytics integrations are described. In one aspect, a method includes the actions of receiving, by a restricted access system and from a client device, a request for access to the restricted access system for a user. The actions further include transmitting a request to authenticate the user. The actions further include receiving, by the restricted access system and from the credential management system, challenge data. The actions further include transmitting the challenge data. The actions further include receiving a token indicating that the credential management system authenticated the user based on the user interacting with a representation of the challenge data that was provided to the client device. The actions further include in response to receiving the token, opening a session between the client device and the restricted access system.

Electronic credential and analytics integration

The subject matter described herein can be embodied in a computer-readable medium storing instructions that cause one or more processors to perform operations including receiving, from a client device associated with a user account of a first user, a request to grant a second user access to a key associated with a credential. The credential is associated with the user account of the first user, the request includes an address of the second user, and the key permits access to a resource. The operations include accessing, at a server, a second user account based on the address of the second user, and associating, by the server, the key with the second user account, such that the second user is enabled to access the resource. The operations further include communicating, to the address of the second user, a message indicating that the second user account has been associated with the key.

Growing community of inventors

Washington, DC, United States of America

John Gehret