Brian J Campbell

US Patent:

8473749, Jun 25, 2013

Filed:

Jul 9, 2012

Appl. No.:

13/544553

Inventors:

Paul Madsen - Ottawa, CA
Brian Campbell - Denver CO, US

Assignee:

Ping Identity Corporation - Denver CO

International Classification:

H04L 29/06

US Classification:

713187, 713188, 713189, 713194, 726 26, 726 27, 726 28

Abstract:

In some embodiments, a non-transitory processor-readable medium includes code to cause a processor (e. g. , on an enterprise server) to receive, from a communication device, a request for a client application, and in response to the request provision the installation file data associated with the client application to include an application token associated with the client application. The code is to cause the processor to send the installation file that includes the application token to the communication device such that the communication device uses the installation file to install the client application that authenticates to an application module using the application token extracted from the installation file.

US Patent:

8613055, Dec 17, 2013

Filed:

Feb 22, 2013

Appl. No.:

13/774653

Inventors:

Brian Campbell - Denver CO, US

Assignee:

Ping Identity Corporation - Denver CO

International Classification:

G06F 21/00

US Classification:

726 4, 726 9, 726 20, 713182

Abstract:

In some embodiments, an apparatus includes an authorization module implemented in at least one of a memory or a processing device. The authorization module can receive from an application a request for an access token associated with the application that includes a scope identifier associated with a level of access to a resource module. The authorization module can select based on the scope identifier at least one authentication mode from a set of predefined authentication modes. The authorization module can also receive at least one credential assigned to at least one authentication mode. Additionally, the authorization module can send the access token to the application in response to authenticating a user of the application based on the at least one credential.

US Patent:

8615794, Dec 24, 2013

Filed:

Jan 9, 2013

Appl. No.:

13/737525

Inventors:

Brian Campbell - Denver CO, US

Assignee:

Ping Identity Corporation - Denver CO

International Classification:

G06F 21/00

US Classification:

726 6, 726 9, 713182, 713185

Abstract:

In some embodiments, an apparatus includes an authorization module implemented in at least one of a memory or a processing device. The authorization module receives at a first time and from a first mobile application, a request for an access token associated with a second mobile application that includes an identifier associated with the second mobile application and a first random verification identifier. The authorization module provides to the first mobile application a signal representing an authorization code associated with the access token. The authorization module receives from the second mobile application at a second time a signal representing the authorization code, the identifier associated with the second mobile application, and a second random verification identifier. The authorization module provides a signal representing the access token to the second mobile application based in part on the first random verification identifier being equal to the second random verification identifier.