Patent ID: 9419799
Filing Date: 2016-08-16
CPC Classification: H04L

Claim Text:
1. A computer implemented method for providing secure credential using a secure credential package stored on a client device and at least one key stored in a corporate network, the computer implemented method comprising: receiving credentials and a device unique identifier from the client device over a secure link; obtaining the at least one key from the corporate network, wherein the at least one key is stored in a key store that is located behind a first firewall of the corporate network relative to the client device; applying the at least one key to the credentials and the device unique identifier to generate the secure credential package including encrypted credentials corresponding to the credentials and an encrypted device unique identifier corresponding to the device unique identifier; sending the secure credential package to the client device over the secure link; receiving the secure credential package from the client device in connection with an authenticating of the client; decrypting the secure credential package using the at least one key to obtain the credentials, validating the credentials against a user directory located in the corporate network; in the event of a successful validation, sending the credentials to a backend service located in the corporate network for a service authentication; and authenticating the client using the secure credential package based at least in part on the at least one key obtained from the key store and information stored on a resource of the corporate network, wherein the resource of the corporate network is located behind a second firewall of the corporate network relative to the client device, the second firewall being located behind the first firewall.