Patent ID: 9686080
Date: 2017-06-20
CPC Classifications: H04L

Claim:
1. A computer implemented method for authenticating a client device using a secure credential package stored on the client device and at least one key stored in a corporate network, the computer implemented method comprising: receiving, by the computer, the secure credential package from the client device in connection with an authenticating of the client device, wherein the secure credential package includes encrypted credentials and an encrypted unique device identifier; obtaining at least one key from the corporate network, wherein the at least one key is stored in a key store that is located in a first zone of the corporate network; decrypting the secure credential package using the at least one key to obtain credentials; validating the credentials against a user directory located in the corporate network; in the event of a successful validation in response to the validating the credentials, sending the credentials to a backend service located in the corporate network for a service authentication; and authenticating the client device using the secure credential package based at least in part on the at least one key obtained from the key store and information stored on a resource of the corporate network, wherein the resource of the corporate network is located in a second zone of the corporate network, wherein the second zone is located behind a firewall for the second zone of the corporate network relative to the client device, the firewall for the second zone being located behind the first zone of the corporate network.