Christine M Wang

US Patent:

20190069168, Feb 28, 2019

Filed:

Aug 27, 2017

Appl. No.:

15/687528

Inventors:

- San Francisco CA, US
Hassen Karaa - San Francisco CA, US
Christine Wang - Saratoga CA, US
Vinoth Jayaraman - Dublin CA, US
Marc Powell - San Francisco CA, US
Shaolin Shen - San Francisco CA, US
Naveed Makhani - San Francisco CA, US
Ankit Garg - San Francisco CA, US

International Classification:

H04W 12/06
H04L 29/06
G06F 21/31

Abstract:

After an initial user sign-on with an identity provider, and in response to an intention of the user to use a third-party application executing on a client device of the user and requiring user sign-on, the identity provider provides a client script to the third-party application. The client script facilitates user and application authentication and invokes a trusted broker application that interacts with the identity provider to enable the user to use the third-party application. The use of the trusted broker application provided by the identity provider frees the authors of third-party applications from the need to modify their applications to explicitly sign in with the identify provider. For enhanced security, conformance to an organizational security policy is verified at time of sign-on, and an authenticatable link is used to invoke the third-party application to foil attempts by malicious software to substitute another application.

US Patent:

20150326562, Nov 12, 2015

Filed:

May 4, 2015

Appl. No.:

14/703644

Inventors:

- San Francisco CA, US
Hassen Karaa - San Francisco CA, US
Christine Wang - Saratoga CA, US
Vinoth Jayaraman - Dublin CA, US

International Classification:

H04L 29/06

Abstract:

After an initial user sign-on with an identity provider, and in response to an intention of the user to use a third-party application executing on a client device of the user and requiring user sign-on, the identity provider provides a client script to the third-party application. The client script facilitates user and application authentication and invokes a trusted broker application that interacts with the identity provider to enable the user to use the third-party application. The use of the trusted broker application provided by the identity provider frees the authors of third-party applications from the need to modify their applications to explicitly sign in with the identify provider.