Patent ID: 9083703
Filing Date: 2015-07-14
Classification: H04L,H04W

Abstract:
1. A method for use in multi-factor authentication to an enterprise network, comprising: launching an application on a user's mobile device that prompts the user to enter a first authentication factor; validating the first authentication factor by a smart card connected with a reader interface of the mobile device; upon validation of the first authentication factor, generating a digital signature of the user by the smart card with a private key in the smart card; first receiving, at the user's mobile device, an identity certificate and the digital signature of the user from the smart card connected with the reader interface of the mobile device; passing the identity certificate and digital signature from the mobile device to a central management server over at least one network; second receiving, at the user's mobile device, a Virtual Private Network (VPN) certificate to access the enterprise network via a VPN connection in response to the passing; initiating, from the mobile device, the VPN connection using the VPN certificate, wherein the initiating comprises launching, on the user's mobile device, an application and requesting, in response to the launching, validation of the VPN certificate, wherein the VPN connection is initiated based on a result of the requesting; and receiving, on the user's mobile device, user credentials, wherein the user credentials are included in the VPN certificate validation request.