公开(公告)号：US11063928B2

公开(公告)日：2021-07-13

申请号：US16426383

申请日：2019-05-30

Applicant: VMware, Inc.

Inventor： Emily Hong Xu ,  Lloyd Spencer Evans ,  Lakshman Rao Abburi ,  Tomas Boman

IPC: H04L29/06 ,  G06F16/9535 ,  G06F16/2455 ,  G06F21/33 ,  G06F21/73

Abstract: Disclosed are various examples for transferring device identifying information during authentication. In some examples, an authentication request is transmitted to an identity manager. Instructions to negotiate a ticket are received from the identity manager. A ticket is negotiated from a key distribution center using a certificate comprising a unique device identifier of the client device. The unique device identifier is embedded in the ticket by the key distribution center based on verification that the certificate is valid. Authentication of the client device is completed through the identity manager using the ticket.

公开(公告)号：US10341325B2

公开(公告)日：2019-07-02

申请号：US15197997

申请日：2016-06-30

Applicant: VMware, Inc.

Inventor： Emily Hong Xu ,  Lloyd Spencer Evans ,  Lakshman Rao Abburi ,  Tomas Boman

IPC: H04L29/06 ,  G06F16/9535 ,  G06F16/2455 ,  G06F21/33 ,  G06F21/73

Abstract: Disclosed are various examples for determining whether a client device complies with compliance rules while authenticating a user account. A client certificate can include an identifier corresponding to a client device. An identity provider can extract the identifier while authenticating the user account. The identity provider can determine whether the client device complies with compliance rules prior to authenticating the user account on the client device.

公开(公告)号：US20190281046A1

公开(公告)日：2019-09-12

申请号：US16426383

申请日：2019-05-30

Applicant: VMware, Inc.

Inventor： Emily Hong Xu ,  Lloyd Spencer Evans ,  Lakshman Rao Abburi ,  Tomas Boman

IPC: H04L29/06 ,  G06F16/2455 ,  G06F16/9535 ,  G06F21/33 ,  G06F21/73

Abstract: Disclosed are various examples for transferring device identifying information during authentication. In some examples, an authentication request is transmitted to an identity manager. Instructions to negotiate a ticket are received from the identity manager. A ticket is negotiated from a key distribution center using a certificate comprising a unique device identifier of the client device. The unique device identifier is embedded in the ticket by the key distribution center based on verification that the certificate is valid. Authentication of the client device is completed through the identity manager using the ticket.

公开(公告)号：US20210314312A1

公开(公告)日：2021-10-07

申请号：US17349052

申请日：2021-06-16

Applicant: VMware, Inc.

Inventor： Emily Hong Xu ,  Lloyd Spencer Evans ,  Lakshman Rao Abburi ,  Tomas Boman

IPC: H04L29/06 ,  G06F16/9535 ,  G06F16/2455 ,  G06F21/33 ,  G06F21/73

Abstract: Disclosed are various examples for transferring device identifying information during authentication. An enrollment request is received from a management component executed by a client device. A management service generates a unique device identifier for the client device and embeds it within a certificate to generate a device-identifying certificate. The management service instructs a certificate authority service to generate a public key that includes the unique device identifier and a private key for the client device, and provides the device-identifying certificate and the private key to the client device.

公开(公告)号：US20170223012A1

公开(公告)日：2017-08-03

申请号：US15197997

申请日：2016-06-30

Applicant: VMware, Inc.

Inventor： Emily Hong Xu ,  Lloyd Spencer Evans ,  Lakshman Rao Abburi ,  Tomas Boman

IPC: H04L29/06 ,  G06F17/30

CPC classification number: H04L63/0823 ,  G06F16/24552 ,  G06F16/9535 ,  G06F21/33 ,  G06F21/73 ,  H04L63/0876

Abstract: Disclosed are various examples for determining whether a client device complies with compliance rules while authenticating a user account. A client certificate can include an identifier corresponding to a client device. An identity provider can extract the identifier while authenticating the user account. The identity provider can determine whether the client device complies with compliance rules prior to authenticating the user account on the client device.