CLOUD COMPUTING EXCHANGE FOR IDENTITY PROOFING AND VALIDATION

• US 20140181939A1
• Filed: 12/16/2013
• Published: 06/26/2014
• Est. Priority Date: 12/14/2012
• Status: Abandoned Application

• Current Assignee: United States Postal Service (Government of the United States of America)
• Original Assignee: United States Postal Service (Government of the United States of America)
• Inventors: Bonnell, Clayton Craig
• Application Number:
  US14/107,437
• Publication Number:
  US 20140181939A1
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An architecture and method to provide a cloud based credential exchange wherein organizations and users can use the services of a centralized and streamlined credential clearing house. A user can provide credentials or verification from a third party credential provider to the credential exchange. The credential exchange can use the third party credentials to provide access to multiple networks affiliated with the credential exchange.

Claims

1. A method of allowing network access comprising:

requesting, by a processor, a first set of credentials, wherein the first set of credentials allows a user access to a first application;

receiving, in a processor, the first set of credentials;

associating, by a processor, the first set of credentials with a second set of credentials, wherein the second set of credentials allows the user access to a second application, and wherein the second set of credentials are associated with a network identity;

validating the network identity of the user based on the first and second set of credentials;

allowing access to the second application according to the validated network identity according to the first set of credentials.

2. The method of claim 1 wherein the first set of credentials has a first security requirement and the second set of credentials has a second security requirement.

3. The method of claim 2 wherein validating the network identity of the user comprises evaluating the first security requirement and the second security requirement and determining whether the first security requirement of the first set of credentials is sufficient to meet the second security requirement.