专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11631081B2 Flexible identity and access management pipeline 有权
公开(公告)号：US11631081B2
公开(公告)日：2023-04-18
申请号：US17219684
申请日：2021-03-31
申请人： Okta, Inc.
发明人： William J. Dawson, V , Thomas Abbott , Trevor Thompson , Jonathan R. Todd , Karl McGuinness
IPC分类号： G06F21/31 , G06F21/30 , G06Q20/40 , H04L9/40 , G06F21/45
摘要： A system and a method are disclosed for context-based verification flows for digital identity verification. A context-based verification system provides flexible identification procedures for various enterprises that adapted to the enterprises' services, the enterprises' customers, and these customers' needs. For example, the context-based verification system determines a first and second verification flows associated with a first enterprise and a third verification flow associated with a second enterprise. These verification flows include context parameters and verification parameters. The context-based verification system determines context parameters of a request, or “request context parameters,” when a user requests to interact with the first enterprise and determines a verification flow associated with context parameters that substantially match these request context parameters. The context-based verification system may determine that the first verification flow's context parameters substantially match the request context parameters and use the first verification flow's verification parameters to verify the user's identity.

2. 发明授权

US11457012B2 Device risk level based on device metadata comparison 有权
公开(公告)号：US11457012B2
公开(公告)日：2022-09-27
申请号：US17087639
申请日：2020-11-03
申请人： Okta, Inc.
发明人： Stephen Woodward Lind
IPC分类号： H04L29/00 , H04L9/40
摘要： An authentication system determines a risk level for a client device impersonating a client device enrolled in authentication services by comparing device metadata for the impersonating client device to device metadata for the enrolled client device. As part of enrolling the enrolled client device, the authentication system associates one or more authentication credentials with the enrolled client device. In order to authenticate access requests associated with a client device identified as the enrolled client device, the authentication system obtains an authentication token from the client device generated using the authentication credentials and also obtains device metadata corresponding to the client device. Based on the device metadata comparison during authentication, the authentication system detects device metadata anomalies and uses detected device metadata anomalies to determine a risk level for the client device. Based on the risk level, the authentication system authorizes or denies the client device from accessing requested services.

3. 发明申请

US20220247767A1 DIGITAL ACCESS CONTROL USING TIME-BASED BASELINE ACCESS DISTRIBUTIONS 有权
公开(公告)号：US20220247767A1
公开(公告)日：2022-08-04
申请号：US17163111
申请日：2021-01-29
申请人： Okta, Inc.
发明人： Gautam Borah
IPC分类号： H04L29/06
摘要： An access analysis system obtains data about user requests to access particular applications, such as identifiers of the particular user and application involved, the time of the request, and (optionally) additional contextual data, and uses that data to generate user access distributions that quantify the distribution of a given user's requests to access applications over time. After one or more distributions have been generated for a particular user, when that user submits a new access request for an application, the access analysis system can compare the request to the previously-generated access distributions to determine whether (or to what degree) the request is anomalous. If the request is sufficiently non-anomalous, it can be granted with little or no additional actions required by the user or the user's device; if, however, the request is sufficiently anomalous, it can be denied, or additional information—such as additional user authentication factors—can be required.

4. 发明申请

US20220191186A1 ACCESS TO FEDERATED IDENTITIES ON A SHARED KIOSK COMPUTING DEVICE 有权
公开(公告)号：US20220191186A1
公开(公告)日：2022-06-16
申请号：US17118426
申请日：2020-12-10
申请人： Okta, Inc.
发明人： Kavitha Chandramohan , Johannes Stockmann
IPC分类号： H04L29/06 , H04L29/08
摘要： A kiosk device is shared by many users of an organization in a sequential manner. The kiosk is provisioned so that each of the appropriate users of the organization may use it, and so that each such user may be provided with a federated identity by an external identity provider (IdP) system. The federated identity may be used to automatically provide the user with access to the user's different resources (e.g., the user's accounts on various third-party applications). An authenticator component of the kiosk device communicates with the external IdP system so as to securely and transparently provide the users with a federated identity. In order to provide additional security, the authenticator component and/or the IdP system may take into account organization-specific details when authenticating a user, such as whether a particular user is expected to be on duty with the organization at the current time.

5. 发明申请

US20220150249A1 EFFICIENT GENERATION OF IDENTITY PROVIDER INTEGRATIONS 有权
公开(公告)号：US20220150249A1
公开(公告)日：2022-05-12
申请号：US17092205
申请日：2020-11-06
申请人： Okta, Inc.
发明人： Daniel Zeller , Lars Kristian Johansen , Venkat Ramanan Viswanathan , Yu Liu , Shantanu Sardal
IPC分类号： H04L29/06 , H04L12/24
摘要： An authentication system facilitates efficient generation of authentication integrations with third-party identity providers for client systems. The authentication system provides one or more interfaces configured to receive requests to make authentication integrations available for a third-party identity provider. The requests to make authentication integrations available include integration information for the relevant identity provider. Based on the request to make authentication integrations available, the authentication system generates an identity provider profile for the identity provider that can be used to generate authentication integrations with the identity provider for one or more client systems. Once the identity provider profile is generated, the authentication system uses the identity provider profile to generate authentication integrations for one or more client systems that request authentication through the third-party identity provider. In doing so, the authentication system provides an efficient process for providing authentication integrations with identity providers requested by client systems.

6. 发明申请

US20220124098A1 PROVIDING FLEXIBLE SERVICE ACCESS USING IDENTITY PROVIDER 有权
公开(公告)号：US20220124098A1
公开(公告)日：2022-04-21
申请号：US17076760
申请日：2020-10-21
申请人： Okta, Inc.
发明人： Dipti Vivek Shiralkar , Arun Thotta Suresh , Mohammad Rahimi , Ankit Garg
IPC分类号： H04L29/06 , G06N20/00
摘要： A service provider provides flexible access to services using an identity provider. The service provider is associated with a custom access policy used by the identity provider to authenticate access requests associated with client devices for services of the client system. The custom access policy describes a set of access levels corresponding to variable levels of access to services of the service provider. The identity provider authenticates access requests by client devices using one or more device signals from the client devices. In some embodiments, the identity provider determines a device trust score for the client device using the one or more device signals. The identity provider provides an authentication response to the client system based on the custom access policy. The client system uses the authentication response to determine an access level for the client device from the set of access levels described by the custom access policy.

7. 发明授权

US10169569B2 Automated password generation and change 有权
公开(公告)号：US10169569B2
公开(公告)日：2019-01-01
申请号：US15880863
申请日：2018-01-26
申请人： Okta, Inc.
发明人： Hector Aguilar-Macias , Reman P. Child , Xin Gu , Jonathan R. Todd , Thomas M. Belote
IPC分类号： G06F21/41 , H04L29/06 , G06F21/45 , G06F21/46 , H04L29/08 , G06N99/00
摘要： An identity management system detects the occurrence of a trigger event, such as a time period expiration, or an action on the identity management system. The identity management system accordingly generates a new password for an account of a user on a third-party service and causes the account of the user on the third-party service to use the new password. The identity management system can also detect a manual user change of a password for a third-party service and cause configuration of client devices of the user to reflect the new password.

8. 发明授权

US08881129B1 Updating integration metadata in a multi-tenant system 有权
标题翻译：在多租户系统中更新集成元数据
公开(公告)号：US08881129B1
公开(公告)日：2014-11-04
申请号：US13115052
申请日：2011-05-24
申请人： Todd McKinnon , Matthew Mihic
发明人： Todd McKinnon , Matthew Mihic
IPC分类号： G06F9/44
CPC分类号： G06F8/65 , G06F8/60 , G06F11/3688 , G06Q10/10
摘要： Updating integration metadata in a multi-tenant system includes determining at a multi-tenant services management platform that a service provider software code has changed in a manner that affects a canonical feature provided by the multi-tenant service management platform with respect to a service of the service provider to end users associated with one or more tenants of the multi-tenant services management platform, wherein the canonical feature is provided at least in part by interacting with the service provider on the behalf of a user; and implementing at the multi-tenant services management platform, with respect to at least a subset of said one or more tenants, an accommodation that enables the canonical feature to be provided subsequent to the service provider software code having been changed.
摘要翻译：在多租户系统中更新集成元数据包括在多租户服务管理平台上确定服务供应商软件代码已经以影响由多租户服务管理平台提供的规范特征相对于服务的服务而改变的方式所述服务提供商至少与所述多租户服务管理平台的一个或多个租户相关联的终端用户，其中所述规范特征至少部分地通过与所述服务提供商代表用户交互来提供; 并且在所述多租户服务管理平台中，对于所述一个或多个租户的至少一个子集实施允许在所述服务提供商软件代码已被改变之后提供所述规范特征的住宿。

9. 发明授权

US08661084B1 Metadata based platform for accessing and managing multiple heterogeneous information services 有权
标题翻译：基于元数据的平台，用于访问和管理多个异构信息服务
公开(公告)号：US08661084B1
公开(公告)日：2014-02-25
申请号：US12870370
申请日：2010-08-27
申请人： Todd McKinnon , Matthew Mihic
发明人： Todd McKinnon , Matthew Mihic
IPC分类号： G06F15/16
CPC分类号： H04L67/16 , G06Q10/10
摘要： A request is received for a service provider to perform an action associated with a canonical feature. Metadata associated with the service provider is used to interact with the service provider in a way that causes the service provider to perform the action.
摘要翻译：接收到服务提供商执行与规范特征相关联的动作的请求。与服务提供商相关联的元数据用于使服务提供商执行该操作的方式与服务提供商进行交互。

10. 发明申请

US20230035701A1 MULTI-TENANCY VIA CODE ENCAPSULATED IN SERVER REQUESTS 有权
公开(公告)号：US20230035701A1
公开(公告)日：2023-02-02
申请号：US17964890
申请日：2022-10-12
申请人： Okta, Inc.
发明人： Tomasz Janczuk , Matías Woloski
IPC分类号： H04L67/1097 , H04L67/133 , G06F9/54 , H04L67/00 , H04L67/561
摘要： A multitenant infrastructure server (MTIS) is configured to provide an environment to execute a computer routine of an arbitrary application. The MTIS receives a request from a webtask server to execute the computer routine in a webtask container. The computer routine is executed in the webtask container at the MTIS. Upon successful execution of the computer routine, a result set is returned to the webtask server. If the execution of the computer routine is unsuccessful, an error notification is returned to the webtask server. The resources consumed during the execution of the computer routine are determined. The webtask container is destroyed to prevent persistent storage of the computer routine on the MTIS.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式