Patent ID: 9325683
Filing Date: 2016-04-26
CPC Classification: G06F,H04L,H04W

Claim Text:
1. A method of authenticating a client device, comprising: receiving a first request from a mobile application on the client device to access a mobile application service provider, the request including a device identification and user credentials and being received by an intermediate gateway positioned between the client device and the mobile application service provider; transmitting, by the intermediate gateway, at least the user credentials to the mobile application service provider for authentication; receiving, at the intermediate gateway, an indication that the user credentials were authenticated by the mobile application service provider; in response to the authentication, storing the device identification for future authentications of the mobile application by the intermediate gateway; generating a device certificate and transmitting the device certificate to the client device; receiving, at the intermediate gateway, the device identification together with a second request from the mobile application to access the mobile application service provider; comparing the device identification against stored device identifications in the intermediate gateway; if the device identification is matched against one of the stored device identifications, encrypting information in the intermediate gateway and transmitting the encrypted information to the client device, the encrypted information being decryptable with the device certificate; receiving information decrypted with the device certificate from the client device so as to authenticate the second request from the mobile application.