Uniken Inc.

Other

Adp, Inc.

Identropy, Inc.

Oracle International Corporation

Nishant Kaushik

Bimal I Gandhi

Tejas Digambar Limaye

Robert Alan Levine

James Anthony Villarrubia

Francisco Villavicencio

Vincent Civetta

Deepak Kaushal

Zhitao Steve Xu

Ashraf Motiwala

Christopher Hydak

Neha Pahwa

Roberto A Masiero

Frank Villavicencio

Sanjoli Ahuja

Madusudhanan Ragothaman

Michael Nepomnyashy

Matthew David Crumb

Krishna Chaitanya Pinnamaneni

Mubdiu Reza Chowdhury

Babar A Farooqi

Svetlana Kats

Justo D Pastor

Philip M O'Neill

A method, computer system and computer program product for authenticating a transaction is provided. A service provider receives a transaction between a user and a website displayed on a first device. The service provider identifies a first geolocation of the first device. The service provider generates a code for display on the first device. The service provider receives credential information to identify the user and the code from a second device. The service provider identifies a second geolocation of the second device, and determines a level of risk for the transaction based at in part on the first geolocation and the second geolocation. In response to the level of risk being an acceptable level of risk, the service provider authenticates the user. The service provider generates information to enable the user on the first device to perform the transaction with the website, and sends the information to the website.

Enhanced security authentication system

A middlebox includes at least one processor and a memory storing one or more executable instructions that, when executed by the least one processor, cause the at least one processor to receive, from a server, a middlebox key that includes an indication of a lifetime of the middlebox key, receive, from a client device, one or more data packets including encrypted header data and a client device identifier, and determine whether to permit a transmission of the one or more data packets to the server or prevent a transmission of the one or more data packets to the server based on the middlebox key, the encrypted header data, and the client device identifier.

Algorithmic packet-based defense against distributed denial of service

A method includes executing a mobile threat detection function to determine whether an electronic device is corrupt. The method also includes when determining that the electronic device is not corrupt, identifying whether an encrypted user key (UK-Enc) is stored in the electronic device. The method further includes when the UK-Enc is not stored in the electronic device, decrypting an application key (AK) and transmitting the AKand a unique universal identifier (UUID) that is associated with the application to a gateway for establishing a secure application specific communication channel between the electronic device and the gateway. In addition, the method includes when the UK-Enc is stored in the electronic device, decrypting the UK-Enc to form a user key (UK), extracting a UUID from the UK, and transmitting the UUID from the UKto the gateway for establishing the secure application specific communication channel between the electronic device and the gateway.

Network-based key distribution system, method, and apparatus

A method for leveraging a first secure channel of communication between a first agent and a second agent to create a second secure channel of communication between the first agent and a third agent. The method includes creating the first secure channel of communication between the first agent and the second agent using a configurable data-driven initial process on a first computing device. Responsive to the first agent receiving a request from the third agent to establish the second secure channel of communication, the method further includes retrieving identifying information from the third agent. The method further includes ending the identifying information from the third agent to the second agent over the first secure channel of communication. Responsive to receiving approval of the third agent's request from the second agent, the method further includes establishing the second secure channel of communication.

Method for leveraging a secure telecommunication session

A method, a computer system, and a computer program product for authenticating a transaction are provided. An authentication system receives the transaction over a particular channel of a plurality of support channels. A risk score is determined for the transaction based on a number of contextual risk factors. An authentication scheme is determined from a number of authentication schemes for authenticating an identity of the user within an authentication context. The authentication scheme is determined based on the particular channel and the risk score. In response to successfully authenticating the identity of the user within the authentication context, the authentication system determines whether the transaction is a permitted transaction based on an assurance level associated with the authentication context. In response to determining that the transaction is the permitted transaction, the transaction is authenticated.

An apparatus includes a computing system that is configured to receive, from an electronic device, a verification message indicating that the electronic device is not corrupt. The computing system is also configured to receive, from the electronic device, a unique universal identifier (UUID) that is associated with an application stored in a memory of the electronic device. The computing system is further configured to receive, from a management server of the one or more management servers, a server key stored in a credential store and that is associated with the UUID received from the electronic device. In addition, the computing system is configured to establish one or more secure channels for electronic data communication with the electronic device based on the received UUID and the server key.

A method for leveraging a secure communication channel between a first agent and a second agent to authenticate an activity outside of the secure communication channel. The method includes receiving with the first agent a communication request through an insecure channel from the second agent. The method further includes receiving with the first agent an indicator of a relative identity relationship from the second agent. The method further includes sending with the first agent a request to authenticate the activity outside of the secure communication channel to the second agent. The method further includes authenticating the activity outside of the secure communication channel using the secure communication channel.

Entropy-based authentication of mobile financial transaction

A recommendation engine for identity management is disclosed. A data store including an identity management access database is provided. Suggested access entitlement operations for potential identities of a listing of identities on which to perform access entitlement operations are generated. Suggested access entitlement operations for the potential identities of the listing of identities on which to perform access entitlement operations are offered through a user interface. In some embodiments, the generating suggested access entitlement operations includes analyzing a requesting user and one or more identities with connection to the requesting user to identify the potential identities of the listing of identities on which to perform access entitlement operations, and based at least in part on the patterns of access entitlement in the identity management access database, selecting the suggested access entitlement operations for each of the potential identities of the listing of identities on which to perform access entitlement operations.

Recommendation engine for unified identity management across internal and shared computing applications

A single user interface for a user of an identity management module is presented. The single user interface includes options for transmitting an access management instruction to a customer internal application via an on-premise proxy, and transmitting another access management instruction to a shared computing system application via a multi-customer gateway on the shared computing system. The user interface is adaptively adjusted to highlight suggested access entitlement operations based at least in part upon expected access entitlements derived from a prediction engine.

Graphical user interface for unified identity management across internal and shared computing applications

Various embodiments of methods and apparatus for a unified management interface across internal and shared computing applications are disclosed. In some embodiments, one or more processors perform, responsive to receiving a plurality of access management requests at an identity management interface, transmitting an access management instruction to a customer internal application via an on-premise proxy, and transmitting another access management instruction to a shared computing system application via a multi-customer gateway on the shared computing system.

Methods and apparatus for a unified identity management interface across internal and shared computing applications

Systems and methods for resource provisioning. Resources for which provisioning could be performed might include, for example, software, devices, directories, and/or databases. Where performance of an operation involved in provisioning requires interface with a resource, various operations might be performed to achieve such interface. The operations involved in a particular provisioning procedure could, for example, be defined by a system administrator and/or other user. Provisioning procedure execution might be monitored and/or affected. Further, such execution might be checked for compliance with one or more established business rules.

Growing community of inventors

Jersey City, NJ, United States of America

Nishant Kaushik