Abstract

A request associated with accessing resources of the second party may be received at a first agent installed on a device for a first party, the being received from a second agent installed on the device for a second party. Based on the request, a signed access request that includes a refresh token previously obtained from a service of the resource management system (RMS) may be sent to the service of the RMS. The signed access request may be signed by a private key of the device. Also, a public key of the device corresponding to the private key may be registered with the service of the RMS. In response to sending the signed access request, a session token associated with accessing the resources of the second through the second agent may be received by the first agent from the service of the RMS.

IPC Classes  ?

• H04L 9/08 - Key distribution
• H04L 9/32 - Arrangements for secret or secure communicationsNetwork security protocols including means for verifying the identity or authority of a user of the system
• H04L 67/63 - Routing a service request depending on the request content or context

Abstract

Methods, systems, and devices for server-initiated secure sessions are described. A browser application may connect to a portal, where the portal may transmit a command to a server agent to initiate a secure session with an endpoint device. The server agent may be housed in a destination server, and may establish a secure connection with an intermediary server using a secure communication protocol. The secure connection may be made by directing the destination server to open an out-bound connection through a firewall of the destination server. A browser session may be redirected to the intermediary server from the browser application, and the intermediary server may route the browser session traffic to the secure connection.

IPC Classes  ?

• H04L 9/40 - Network security protocols
• H04L 67/02 - Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
• H04L 67/142 - Managing session states for stateless protocolsSignalling session statesState transitionsKeeping-state mechanisms

Abstract

Mechanisms for resource management are described. A trust anchor for a device may be obtained. A trust anchor for a user may be obtained. A public key of the device that corresponds to a private key stored in a cryptographic component internal to the device may be generated. The public key of the device may be registered, with a service operated by a resource management system, to a combination of the device and user. Registering the public key of the device may include sending, to the service operated by the resource management system, a registration message that indicates the trust anchor for the device, the trust anchor for the user, and the public key of the device.

IPC Classes  ?

• H04L 9/08 - Key distribution
• H04L 9/32 - Arrangements for secret or secure communicationsNetwork security protocols including means for verifying the identity or authority of a user of the system

Abstract

Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. IT resources for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

IPC Classes  ?

• H04L 9/40 - Network security protocols
• G06F 21/31 - User authentication
• G06F 21/45 - Structures or tools for the administration of authentication
• G06Q 10/10 - Office automationTime management
• H04L 61/4523 - Network directoriesName-to-address mapping using standardised directoriesNetwork directoriesName-to-address mapping using standardised directory access protocols using lightweight directory access protocol [LDAP]

Abstract

Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. IT resources for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

IPC Classes  ?

• H04L 9/40 - Network security protocols
• G06F 21/31 - User authentication
• G06F 21/45 - Structures or tools for the administration of authentication
• G06Q 10/10 - Office automationTime management
• H04L 61/4523 - Network directoriesName-to-address mapping using standardised directoriesNetwork directoriesName-to-address mapping using standardised directory access protocols using lightweight directory access protocol [LDAP]

Abstract

Mechanisms for resource management are described. A public key of a second device and an identifier of the public key may be received at a first device. The public key may correspond to a private key stored at the second device, be referenceable using the key identifier, and be associated with a user. A string of randomized characters may be encrypted at the first device using a secret generated from an ephemeral key generated at the first device and the public key, and encrypted data may be obtained. A packet may be generated at the first device that includes the ephemeral key, the key identifier, and the encrypted data. Based on providing the packet to the second device, the string of randomized characters may be inputted into the first device and the user may be authenticated for access to the first device.

IPC Classes  ?

• H04L 9/40 - Network security protocols
• H04L 9/08 - Key distribution
• H04L 9/30 - Public key, i.e. encryption algorithm being computationally infeasible to invert and users' encryption keys not requiring secrecy
• H04L 9/32 - Arrangements for secret or secure communicationsNetwork security protocols including means for verifying the identity or authority of a user of the system
• H04W 12/63 - Location-dependentProximity-dependent

Abstract

Mechanisms for resource management are described. A trust anchor for a device may be obtained. A trust anchor for a user may be obtained. A public key of the device that corresponds to a private key stored in a cryptographic component internal to the device may be generated. The public key of the device may be registered, with a service operated by a resource management system, to a combination of the device and user. Registering the public key of the device may include sending, to the service operated by the resource management system, a registration message that indicates the trust anchor for the device, the trust anchor for the user, and the public key of the device.

IPC Classes  ?

• H04L 9/08 - Key distribution
• H04L 9/32 - Arrangements for secret or secure communicationsNetwork security protocols including means for verifying the identity or authority of a user of the system

Abstract

A request associated with accessing resources of the second party may be received at a first agent installed on a device for a first party, the being received from a second agent installed on the device for a second party. Based on the request, a signed access request that includes a refresh token previously obtained from a service of the resource management system (RMS) may be sent to the service of the RMS. The signed access request may be signed by a private key of the device. Also, a public key of the device corresponding to the private key may be registered with the service of the RMS. In response to sending the signed access request, a session token associated with accessing the resources of the second through the second agent may be received by the first agent from the service of the RMS.

IPC Classes  ?

• H04L 9/08 - Key distribution
• H04L 9/32 - Arrangements for secret or secure communicationsNetwork security protocols including means for verifying the identity or authority of a user of the system
• H04L 67/63 - Routing a service request depending on the request content or context

Abstract

Resource management is described. A trust anchor for a device may be obtained. A trust anchor for a user may be obtained. A public key of the device that corresponds to a private key stored in a cryptographic component internal to the device may be generated. The public key of the device may be registered, with a service operated by a resource management system, to a combination of the device and user. Registering the public key of the device may include sending, to the service operated by the resource management system, a registration message that indicates the trust anchor for the device, the trust anchor for the user, and the public key of the device.

IPC Classes  ?

• G06F 21/33 - User authentication using certificates
• H04L 9/32 - Arrangements for secret or secure communicationsNetwork security protocols including means for verifying the identity or authority of a user of the system
• H04L 9/40 - Network security protocols

Abstract

Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources and/or user account information across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. User account information for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

IPC Classes  ?

• H04L 9/40 - Network security protocols
• G06F 21/31 - User authentication
• G06F 21/45 - Structures or tools for the administration of authentication
• G06Q 10/10 - Office automationTime management

Abstract

Methods, systems, and devices are described for orchestrating server management in a modern IT network. The described techniques may be implemented to manage any number of networked severs, whether local, remote, or both. Server orchestration may leverage a central, cloud-based management system and/or one or more autonomous agents installed on servers with the network. The autonomous agents may each be registered with the supervisory server and may have awareness of one another.

IPC Classes  ?

• H04L 41/046 - Network management architectures or arrangements comprising network management agents or mobile agents therefor
• H04L 9/40 - Network security protocols
• H04L 41/28 - Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration

Goods & Services

Software as a service (SAAS), namely, providing browser-based technology for providing multifactor authentication login for computer server security purposes

Abstract

Methods, systems, and devices for secure endpoint authentication credential control are described. An endpoint agent may receive an indication from an operating system of an endpoint device that the operating has received authentication credentials from a user. The endpoint agent may be housed in the endpoint device, and may detect a change between the received set of authentication credentials and a previous version of authentication credentials. Based on this detection, the endpoint agent may transmit the received authentication credentials to a central server. The central server may transmit the authentication credentials to an information technology (IT) resource which requires user authentication prior to granting access to a user.

IPC Classes  ?

• H04L 9/40 - Network security protocols
• H04L 67/00 - Network arrangements or protocols for supporting network services or applications
• G06F 21/30 - Authentication, i.e. establishing the identity or authorisation of security principals
• G06F 21/41 - User authentication where a single sign-on provides access to a plurality of computers

Abstract

Methods, systems, and devices for server-initiated secure sessions are described. A browser application may connect to a portal, where the portal may transmit a command to a server agent to initiate a secure session with an endpoint device. The server agent may be housed in a destination server, and may establish a secure connection with an intermediary server using a secure communication protocol. The secure connection may be made by directing the destination server to open an out-bound connection through a firewall of the destination server. A browser session may be redirected to the intermediary server from the browser application, and the intermediary server may route the browser session traffic to the secure connection.

IPC Classes  ?

• H04L 29/06 - Communication control; Communication processing characterised by a protocol
• H04L 9/40 - Network security protocols
• H04L 67/142 - Managing session states for stateless protocolsSignalling session statesState transitionsKeeping-state mechanisms
• H04L 67/02 - Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

Methods, systems, and devices are described for orchestrating server management in a modern IT network. The described techniques may be implemented to manage any number of networked severs, whether local, remote, or both. Server orchestration may leverage a central, cloud-based management system and/or one or more autonomous agents installed on servers with the network. The autonomous agents may each be registered with the supervisory server and may have awareness of one another.

IPC Classes  ?

• H04L 41/046 - Network management architectures or arrangements comprising network management agents or mobile agents therefor
• H04L 9/40 - Network security protocols
• H04L 41/28 - Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration

Abstract

Methods, systems, and devices for secure endpoint authentication credential control are described. An endpoint agent may receive an indication from an operating system of an endpoint device that the operating has received authentication credentials from a user. The endpoint agent may be housed in the endpoint device, and may detect a change between the received set of authentication credentials and a previous version of authentication credentials. Based on this detection, the endpoint agent may transmit the received authentication credentials to a central server. The central server may transmit the authentication credentials to an information technology (IT) resource which requires user authentication prior to granting access to a user.

IPC Classes  ?

• H04L 9/40 - Network security protocols
• G06F 21/30 - Authentication, i.e. establishing the identity or authorisation of security principals
• G06F 21/41 - User authentication where a single sign-on provides access to a plurality of computers
• H04L 67/00 - Network arrangements or protocols for supporting network services or applications

Abstract

Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. IT resources for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

IPC Classes  ?

• H04L 9/40 - Network security protocols
• G06F 21/31 - User authentication
• G06F 21/45 - Structures or tools for the administration of authentication
• G06Q 10/10 - Office automationTime management
• H04L 61/4523 - Network directoriesName-to-address mapping using standardised directoriesNetwork directoriesName-to-address mapping using standardised directory access protocols using lightweight directory access protocol [LDAP]

Abstract

Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources and/or user account information across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. User account information for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

IPC Classes  ?

• H04L 9/40 - Network security protocols
• G06F 21/31 - User authentication
• G06F 21/45 - Structures or tools for the administration of authentication
• G06Q 10/10 - Office automationTime management

Goods & Services

Computer software for controlling and managing computer server security applications. Software as a service services, namely, hosting software for use by others for use in providing a computer server security solution.

Abstract

Methods, systems, and devices for server-initiated secure sessions are described. A browser application may connect to a portal, where the portal may transmit a command to a server agent to initiate a secure session with an endpoint device. The server agent may be housed in a destination server, and may establish a secure connection with an intermediary server using a secure communication protocol. The secure connection may be made by directing the destination server to open an out-bound connection through a firewall of the destination server. A browser session may be redirected to the intermediary server from the browser application, and the intermediary server may route the browser session traffic to the secure connection.

IPC Classes  ?

• H04L 29/06 - Communication control; Communication processing characterised by a protocol
• H04L 9/40 - Network security protocols
• H04L 67/142 - Managing session states for stateless protocolsSignalling session statesState transitionsKeeping-state mechanisms
• H04L 67/01 - Protocols
• H04L 67/02 - Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

Methods, systems, and devices are described for orchestrating server management in a modern IT network. The described techniques may be implemented to manage any number of networked severs, whether local, remote, or both. Server orchestration may leverage a central, cloud-based management system and/or one or more autonomous agents installed on servers with the network. The autonomous agents may each be registered with the supervisory server and may have awareness of one another.

IPC Classes  ?

• H04L 41/046 - Network management architectures or arrangements comprising network management agents or mobile agents therefor
• H04L 9/40 - Network security protocols
• H04L 41/28 - Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration

Goods & Services

Downloadable mobile application software providing one-touch multi-factor authentication for verifying an identity when accessing IT resources

Abstract

Methods, systems, and devices for secure endpoint authentication credential control are described. An endpoint agent may receive an indication from an operating system of an endpoint device that the operating has received authentication credentials from a user. The endpoint agent may be housed in the endpoint device, and may detect a change between the received set of authentication credentials and a previous version of authentication credentials. Based on this detection, the endpoint agent may transmit the received authentication credentials to a central server. The central server may transmit the authentication credentials to an information technology (IT) resource which requires user authentication prior to granting access to a user.

IPC Classes  ?

• G06F 21/30 - Authentication, i.e. establishing the identity or authorisation of security principals
• G06F 21/41 - User authentication where a single sign-on provides access to a plurality of computers
• H04L 9/40 - Network security protocols
• H04L 67/00 - Network arrangements or protocols for supporting network services or applications

Abstract

Methods, systems, and devices are described for orchestrating server management in a modern IT network. The described techniques may be implemented to manage any number of networked severs, whether local, remote, or both. Server orchestration may leverage a central, cloud-based management system and/or one or more autonomous agents installed on servers with the network. The autonomous agents may each be registered with the supervisory server and may have awareness of one another.

IPC Classes  ?

• H04L 12/24 - Arrangements for maintenance or administration
• H04L 29/06 - Communication control; Communication processing characterised by a protocol

Abstract

Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. IT resources for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

IPC Classes  ?

• H04L 29/06 - Communication control; Communication processing characterised by a protocol
• G06F 21/45 - Structures or tools for the administration of authentication
• G06Q 10/10 - Office automationTime management
• G06F 21/31 - User authentication
• H04L 29/12 - Arrangements, apparatus, circuits or systems, not covered by a single one of groups characterised by the data terminal

Goods & Services

Providing on-line training courses in the field of configuring network systems, password settings and multi-factor authentication, users, groups and applications Software as a service services, namely, hosting software for use by others for use in connecting users with IT resources, including computing devices and software applications

Goods & Services

Software as a service services, namely, hosting software for use by others for use in connecting users with IT resources, including computing devices and software applications

Abstract

Methods, systems, and devices are described for orchestrating server management in a modern IT network. The described techniques may be implemented to manage any number of networked severs, whether local, remote, or both. Server orchestration may leverage a central, cloud-based management system and/or one or more autonomous agents installed on servers with the network. The autonomous agents may each be registered with the supervisory server and may have awareness of one another.

IPC Classes  ?

• H04L 12/24 - Arrangements for maintenance or administration
• H04L 29/06 - Communication control; Communication processing characterised by a protocol

Abstract

Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources and/or user account information across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. User account information for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

IPC Classes  ?

• H04L 29/06 - Communication control; Communication processing characterised by a protocol
• G06F 21/45 - Structures or tools for the administration of authentication
• G06Q 10/10 - Office automationTime management
• G06F 21/31 - User authentication

Abstract

Methods, systems, and devices for secure endpoint authentication credential control are described. An endpoint agent may receive an indication from an operating system of an endpoint device that the operating has received authentication credentials from a user. The endpoint agent may be housed in the endpoint device, and may detect a change between the received set of authentication credentials and a previous version of authentication credentials. Based on this detection, the endpoint agent may transmit the received authentication credentials to a central server. The central server may transmit the authentication credentials to an information technology (IT) resource which requires user authentication prior to granting access to a user.

IPC Classes  ?

• H04L 29/06 - Communication control; Communication processing characterised by a protocol
• G06F 21/30 - Authentication, i.e. establishing the identity or authorisation of security principals
• G06F 21/41 - User authentication where a single sign-on provides access to a plurality of computers

Abstract

Methods, systems, and devices for server-initiated secure sessions are described, A browser application may connect to a portal, where the portal may transmit a command to a server agent to initiate a secure session with an endpoint device. The server agent may be housed in a destination server, and may establish a secure connection with an intermediary server using a secure communication protocol. The secure connection may be made by directing the destination server to open an outbound connection through a firewall of the destination server, A browser session may be redirected to the intermediary server from the browser application, and the intermediary server may route the browser session traffic to the secure connection.

IPC Classes  ?

• H04L 29/06 - Communication control; Communication processing characterised by a protocol
• H04L 29/08 - Transmission control procedure, e.g. data link level control procedure

Abstract

Methods, systems, and devices for enterprise wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, mid management of information technology (IT) resources across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. IT resources for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

IPC Classes  ?

• H04L 29/06 - Communication control; Communication processing characterised by a protocol
• G06F 21/45 - Structures or tools for the administration of authentication
• G06Q 10/10 - Office automationTime management
• G06F 21/31 - User authentication
• H04L 29/12 - Arrangements, apparatus, circuits or systems, not covered by a single one of groups characterised by the data terminal

Abstract

Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. IT resources for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

IPC Classes  ?

• H04L 29/06 - Communication control; Communication processing characterised by a protocol
• G06Q 10/10 - Office automationTime management
• G06F 21/31 - User authentication
• G06F 21/45 - Structures or tools for the administration of authentication

Abstract

Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. IT resources for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

IPC Classes  ?

• H04L 29/06 - Communication control; Communication processing characterised by a protocol
• G06Q 10/10 - Office automationTime management
• G06F 21/31 - User authentication
• G06F 21/45 - Structures or tools for the administration of authentication

Goods & Services

Computer software for controlling and managing computer server security applications Software as a service services, namely, hosting software for use by others for use in providing a computer server security solution

Goods & Services

Software as a service services, namely, hosting software for use by others for use in providing a computer server security solution

Goods & Services

Computer software for controlling and managing computer server security applications. Software as a services, namely, hosting software for use by others for use in providing a computer server security solution.

Abstract

Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. IT resources for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

IPC Classes  ?

• H04L 29/06 - Communication control; Communication processing characterised by a protocol
• G06Q 10/10 - Office automationTime management
• G06F 21/31 - User authentication
• G06F 21/45 - Structures or tools for the administration of authentication

Goods & Services

Computer software for controlling and managing access server applications; Personal computer application software for managing document control systems; Software; Computer software [programmes]; Cloud computing software; Network management computer software; Cloud network monitoring software; Downloadable cloud computing software; Computer software for database management. Hosting computer software applications for others; Provision of security services for computer networks, computer access and computerised transactions; Computer security system monitoring services; Data security services; Computer security consultancy; Software as a service [SAAS] services; Application service provider services.

Goods & Services

(1) Computer software for controlling and managing computer server security applications (1) Software as a service services, namely, hosting software for use by others for use in providing a computer server security solution

Goods & Services

Computer software for the provision of a cloud-based service to access and secure privileged credentials and passwords

Abstract

Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. IT resources for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

IPC Classes  ?

• H04L 29/06 - Communication control; Communication processing characterised by a protocol
• G06Q 10/10 - Office automationTime management
• G06F 21/31 - User authentication

Abstract

Methods, systems, and devices are described for orchestrating server management in an information technology network. The described techniques may be implemented to manage any number of networked severs, whether local, remote, or both. Server orchestration may leverage a central, cloud-based management system and one or more autonomous agents installed on servers within the network. The autonomous agents may each be registered with the supervisory server and may operate with awareness of one another.

IPC Classes  ?

• H04L 12/24 - Arrangements for maintenance or administration
• H04L 29/06 - Communication control; Communication processing characterised by a protocol

Goods & Services

software as a service services featuring software to connect and manage users and IT resources including computing devices and software applications

Goods & Services

software as a service services featuring software to connect and manage users and IT resources including computing devices and software applications

Goods & Services

Software as a service services, namely, hosting software for use by others for use in connecting users with IT resources

Goods & Services

Computer software for controlling and managing computer server security applications Software as a service services, namely, hosting software for use by others for use in providing a computer server security solution

Goods & Services

Computer software for controlling and managing computer server security applications. Software as a service services, namely, services for providing a computer server security solution to others.

Goods & Services

Computer software for controlling and managing computer server security applications Software as a service services, namely, hosting software for use by others for use in providing a computer server security solution