Patent ID: 9608981
Date: 2017-03-28
CPC Classifications: H04L

Claim:
1. A method, comprising: transmitting, by a processor, an authentication request in view of a user authentication credential to an authentication server, wherein the authentication request comprises a first authentication factor and a second authentication factor; receiving an access granting token from the authentication server; providing the access granting token to gain a service ticket to access a nonce server; transmitting, by the processor, directly to the nonce server, a nonce request in view of the service ticket; receiving a cryptographic nonce from the nonce server, wherein the cryptographic nonce is generated using a secret shared by the nonce server and the authentication server such that the authentication server can validate the cryptographic nonce when presented by a virtual private network (VPN) server, and wherein the cryptographic nonce is provided by at least one of a short-lived certificate or a one-time password; and transmitting, to VPN server, a VPN connection request comprising the cryptographic nonce for authentication of the cryptographic nonce by the VPN server to establish a VPN connection with the VPN server.