Patent ID: 9628469
Date: 2017-04-18
CPC Classifications: G06F,H04L

Claim:
1. A method of authenticating a user to a service in a system having a connection broker that manages connections to the service, comprising: receiving an input of credentials of the user at a client computing device that communicates with the connection broker and the service over a network, the user credentials including a secret component; authenticating the user to grant access to the client computing device upon successful authentication of the user; securely storing the secret component of the user credentials in the client computing device; authenticating the connection broker to a client process which runs in the client computing device and has access to the stored secret component of the user credentials; responsive to successful authentication of the connection broker to the client process, transmitting the stored secret component of the user credentials via the client process from the client computing device to the authenticated connection broker in a secure manner; responsive to receiving the secret component of the user credentials at the authenticated connection broker, forwarding the received secret component of the user credentials from the authenticated connection broker to the service; and at the service, authenticating the user using the secret component of the user credentials forwarded by the authenticated connection broker, wherein the connection broker is authenticated to the client process and the stored secret component of the user credentials is transmitted to the authenticated connection broker responsive to the user selecting to use the same credentials used to access the client computing device to also access the service.