Patent ID: 8996423
Filing Date: 2015-03-31
Classification: G06Q

Abstract:
1. At a first computing device in a distributed network environment, a method of authenticating the first computing device to a second computing device using a mobile module of a third computing device which is connected to the first computing device, the method, which is performed by the first computing device, comprising: obtaining a network security token to establish transport level secure communication between a first computing device and a second computing device by performing the following: sending a request for the network security token to the mobile infrastructure via the second computing device over the network other than the radio network of the mobile infrastructure; receiving at the first computing device a network level challenge response from the mobile module; in response to the network level challenge, creating at the first computing device a response; sending the response from the first computing device to the mobile infrastructure; receiving at the first computer a network security token; sending from the first computer encrypted session keys to the mobile module; receiving at the first computer unencrypted session keys from the mobile module; and establishing with the network security token a multilevel secure communication between the first computing device and the second computing device by performing the following: sending a request for a user token to the mobile infrastructure via the second computing device over the network other than the radio network of the mobile infrastructure; receiving at the first computing device a challenge from the mobile infrastructure; sending from the first computing device the received challenge to a mobile module of the third computing device; receiving at the first computing device a request for user credentials from the mobile module; at the first computing device prompting the user for and receiving the credentials; sending from the first computing device the credentials to the mobile module; receiving at the first computing device a challenge response sent from the mobile module; in response to the challenge, creating at the first computing device a response, and signing or encrypting the response with the network security token; sending the response from the first computing device to the mobile infrastructure; receiving at the first computing device a user token from the mobile infrastructure that includes encrypted user keys; sending from the first computing device the encrypted user keys to the mobile module; receiving at the first computing device unencrypted user keys from the mobile module; and at the first computing device, signing or encrypting one or more requests with the unencrypted user keys; sending from the first computing device to the second computing device the one or more requests; in response to the one or more requests, the first computing device receiving from the second computing device one or more service tokens.