Blackberry Corporation

Research in Motion Corporation

Manvinder Singh

Bradford Lawrence Spencer

Liam John Keast

Mendel Elliot Spencer

Balasubrahmanyam Gattu

Ying Li

Balaaji Tirouvengadam

Systems, methods, and software can be used to provide authentication for a software service. In some aspects, an identity provider (IDP) receives an identity authentication request from a client device. The IDP transmits an on-premises verification initiation request for a digest authentication to on-premises directory provider (OPDP). The IDP receives an on-premises verification initiation request. The an on-premises verification initiation request includes one or more digest authentication attributes. The IDP transmits the one or more digest authentication attributes. The IDP receives a digest, wherein the digest is calculated based on the one or more digest authentication attributes and one or more identity authentication credentials. The IDP transmits the digest, and receives an on-premises verification response that indicates a result of the digest authentication.

Authenticating for a software service

Systems, methods, and software can be used to provide authentication for an enterprise service. In some aspects, an identity server receives an authentication request. An on-premises verification command is transmitted. The on-premises verification command indicates an on-premises agent that verifies on-premises network connectivity. In response to the on-premises verification command, an on-premises verification response message is received. An authentication response is transmitted based on the received on-premises verification response message.

Authenticating for an enterprise service

Aspects relate to authorizing mobile devices for PBX-based voice services. A mobile device calls a PBX over a voice channel, and phone number identifier information is obtained and matched to identifier information for devices that known (authorizeable) to use the PBX. If there is one incoming call that matches to a given device, and an authentication token provided over a data channel matches an authentication token associated with that device, then the device is authorized for voice services. Where there are multiple matching calls, those devices are instructed to provide authentication tokens over their voice channels. The devices can detect absence of a data channel and provide authentication tokens over the voice channels; the devices also can wait to receive a call connected response and in the absence of such provide their authentication tokens over the voice channel. Tokens can be requested and downloaded for storage at the devices.

Authenticating voice calls from mobile devices

Growing community of inventors

Bedford, Canada

Manvinder Singh