Methods and Systems for Secured Authentication of Applications on a Network

• US 20140325594A1
• Filed: 05/29/2013
• Published: 10/30/2014
• Est. Priority Date: 04/26/2013
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Klein, Philippe, Mendel, Jacob, Markel, Shlomo
• Granted Patent: US 9,282,086 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles

Abstract

A secured communication network can include a server including an authentication backend, the authentication backend configured to communicate with an authentication front end of a communication device. A server applet can be associated with the authentication backend. The server applet can authenticate an access right associated with the communication device and establish a security level for the communication with the communication device based on information received from the authentication front end.

Claims

1. A secured communication network, comprising:

a server including an authentication backend, the authentication backend configured to communicate with an authentication front end of a communication device; and

a server applet associated with the authentication backend, where the server applet authenticates an access right associated with the communication device and establishes a security level for the communication with the communication device based on information received from the authentication front end.

2. The secured communication network of claim 1, where the security level is determined based at least in part on a location of the communication device.

3. The secured communication network of claim 1, where the communication comprises communication through a network port.

4. The secured communication network of claim 1, where communication device comprises a mobile device.

5. The secured communication network of claim 1, where the security level is based on a current communication protocol of the communication device.

6. The secured communication network of claim 5, where the communication means is configured to change between near field communication, Bluetooth, Wireless Fidelity, and cellular.

7. The secured communication network of claim 6, where the communication means are configured on a single integrated circuit of the communication device.

8. The secured communication network of claim 1, where the server applet changes a security level based on an external authentication element.

9. The secured communication network of claim 8, where the external authentication element comprises biometric information of a user.

10. The secured communication network of claim 9, where the external authentication element comprises environmental information.

11. The secured communication network of claim 1, where the server applet is configured with hardware.

12. A method for securing a communication network, comprising:

receiving a request from a communication device to connect to a server;

authenticating a user of the communication device; and

establishing a security level for the communication device if the user is authenticated;

where the security level is established based on information received from the authentication front end.

13. The method of claim 12, where the security level is determined based on a location of the communication device.

14. The method of claim 13, where the request to connect to a network server is received through a network port.

15. The method of claim 12, where the security level is based on a current communication means of the communication device.

16. The method of claim 12, further comprising changing the security level based on an external authentication element.

17. The method of claim 16, where the external authentication element comprises biometric information of the user.

18. A communication device, comprising:

a network port;

an applet to provide a secured connection with a communication network through the network port; and

an authentication front end connected with the applet, the authentication front end to send information to an authentication backend of a server, the information to establish a security level for the secured connection with the server over the communication network.

19. The communication device of claim 18, where the information comprises a location of a user of the communication device.

20. The communication device of claim 18, further including a secured zone of the applet, the secured zone comprising hardware.