公开(公告)号：US11895237B1

公开(公告)日：2024-02-06

申请号：US18150769

申请日：2023-01-05

申请人： SPLUNK INC.

发明人： Mingyuan Chen ,  Jesse Chor ,  Dylan Patricia Conway ,  Michael Emery ,  Simon Tam ,  Eeshan Wagh ,  Glen Wong ,  Everett Yip

IPC分类号： H04L9/08 ,  H04L9/32

CPC分类号： H04L9/088 ,  H04L9/3247

摘要： Various embodiments of the present application set forth a computer-implemented method that includes generating, based on a resource file stored at an endpoint device, a credential data packet for authenticating with a first application executing in a first network, where the resource file includes a set of encryption keys associated with a plurality of applications including the first application, and where the credential data packet is encrypted with a device key signed by the endpoint device, and the credential data packet is signed by an endpoint device management (EDM) key extracted from the set of encryptions keys included in the resource file, sending, by the endpoint device, the credential data packet to the first application via a trusted communication channel, and receiving, by the endpoint device and in response to the credential data packet, an authorization packet from the first application via the trusted communication channel.

公开(公告)号：US11582036B1

公开(公告)日：2023-02-14

申请号：US16657494

申请日：2019-10-18

申请人： SPLUNK INC.

发明人： Mingyuan Chen ,  Jesse Chor ,  Dylan Patricia Conway ,  Michael Emery ,  Simon Tam ,  Eeshan Wagh ,  Glen Wong ,  Everett Yip

IPC分类号： H04L9/08 ,  H04L9/32

摘要： Various embodiments of the present application set forth a computer-implemented method that includes generating, based on a resource file stored at an endpoint device, a credential data packet for authenticating with a first application executing in a first network, where the resource file includes a set of encryption keys associated with a plurality of applications including the first application, and where the credential data packet is encrypted with a device key signed by the endpoint device, and the credential data packet is signed by an endpoint device management (EDM) key extracted from the set of encryptions keys included in the resource file, sending, by the endpoint device, the credential data packet to the first application via a trusted communication channel, and receiving, by the endpoint device and in response to the credential data packet, an authorization packet from the first application via the trusted communication channel.