公开(公告)号：US09781105B2

公开(公告)日：2017-10-03

申请号：US14703189

申请日：2015-05-04

Applicant: Ping Identity Corporation

Inventor： Avish Jacob Weiner ,  Ran Ne'Man

IPC: H04L29/06

CPC classification number: H04L63/0853 ,  H04L63/0861 ,  H04L63/18

Abstract: The presently disclosed subject matter includes a system, a method and a non-transitory program storage device configured for authorizing access of a user device to a service provider server. Responsive to a request to authenticate the identity of a user attempting to access an SP server via a user device (UD), an authentication server is configured to initiate at least one authentication operation using a second UD; in the event of a failure to receive a response to the at least one authentication operation from the second UD, the authentication server is configured to proceed according to an alternative authentication method which does not involve the second UD.

公开(公告)号：US09098850B2

公开(公告)日：2015-08-04

申请号：US13625148

申请日：2012-09-24

Applicant: Ping Identity Corporation

Inventor： Avish Jacob Weiner ,  Ran Ne'Man

IPC: G06Q20/00 ,  G06Q20/40 ,  H04W12/06 ,  H04L29/06 ,  H04W12/12

CPC classification number: H04W12/06 ,  G06Q20/401 ,  H04L63/083 ,  H04L63/0861 ,  H04L63/107 ,  H04W12/08 ,  H04W12/12

Abstract: A system arranged to authenticate a user via its mobile device to a service provider, the system comprising: an authentication server; the user mobile device, the user mobile device provided with a verification application arranged to communicate with the authentication server; and a notification server in communication with the authentication server and arranged to transmit a notification to the user mobile device responsive to the authentication server, the authentication server arranged to provide a signed authentication to the service provider responsive to present and historical information regarding one of: the user mobile device; and an additional user device in communication with said authentication server, said signed authentication provided in accordance with a rule set determined by an authorized entity stored on said authentication server memory governing the required present and historical information attribute.

Abstract translation: 一种被配置为经由其移动设备将用户认证给服务提供商的系统，所述系统包括：认证服务器; 所述用户移动设备，被配置有与所述认证服务器进行通信的验证应用的所述用户移动设备; 以及通知服务器，其与所述认证服务器通信并且被布置为响应于所述认证服务器向所述用户移动设备发送通知，所述认证服务器被布置为响应于关于以下之一的当前和历史信息向所述服务提供商提供签名认证： 用户移动设备; 以及与所述认证服务器通信的附加用户设备，所述签名认证根据由存储在所述认证服务器存储器上的授权实体确定的规则集提供，所述认证服务器存储器管理所需的当前和历史信息属性。