Patent ID: 9722980
Date: 2017-08-01
CPC Classifications: G06F,H04L

Claim:
1. A method, comprising: encrypting, by a client device operated by a first party using a public key, original authentication information provided by the first party at the client device to generate encrypted authentication information, wherein the public key and an instruction for encrypting the authentication information were provided by a remote service operated by a second party in response to an access to the remote service by the client device operated by the first party; the client device providing the encrypted authentication information to the remote service operated by the second party; the remote service providing the encrypted authentication information to an on-premises component of an enterprise operated by a third party distinct from the first party and second party; the on-premises component decrypting the encrypted authentication information using a private key corresponding to the public key provided by the remote service operated by the second party to obtain the original authentication information; the on-premises component performing a validation on the original authentication information; and the on-premises component returning a result of the validation to the remote service over a network, wherein the result is signed by the on-premises component using the private key such that the remote service operated by the second party can verify the result was sent by the on-premises component behind a firewall of the enterprise operated by the third party.