US 11,936,646 B2
Online authentication systems and methods
Ron M. Pitters, Fallbrook, CA (US); and Janakiramana Rao Yandapalli, San Diego, CA (US)
Assigned to AXOS BANK, San Diego, CA (US)
Filed by AXOS BANK, San Diego, CA (US)
Filed on Feb. 12, 2019, as Appl. No. 16/273,830.
Claims priority of provisional application 62/629,928, filed on Feb. 13, 2018.
Prior Publication US 2019/0253415 A1, Aug. 15, 2019
Int. Cl. H04L 29/06 (2006.01); G06F 9/451 (2018.01); G06F 21/33 (2013.01); G06F 21/53 (2013.01); H04L 9/40 (2022.01)
CPC H04L 63/0861 (2013.01) [G06F 9/452 (2018.02); G06F 21/33 (2013.01); G06F 21/53 (2013.01); H04L 63/0838 (2013.01)] 21 Claims
OG exemplary drawing
 
1. An authentication system comprising:
a server including at least one server processing device configured to execute an application; and
a desktop virtualization system including at least one virtualization system processing device configured to:
instantiate connection functionality at an access point accessible from outside a first firewall controlling access to the desktop virtualization system;
instantiate a virtual desktop behind the first firewall within the desktop virtualization system, the virtual desktop providing a secure computing environment;
receive an indication that a user of a client device outside the first firewall is authenticated for access through the first firewall to the secure computing environment by the access point at a first time before the client device is in communication with the virtual desktop;
in response to receiving the indication that the user of the client device is authenticated, authenticate the user of the client device for access through a second firewall within the secure computing environment controlling access to the server at a second time after receiving the indication that the user of the client device is authenticated at the first time;
in response to authenticating the user of the client device at the second time, place the client device in communication with the virtual desktop through the at least one network;
launch a secure browser in the virtual desktop; and
using the secure browser, place the client device in communication with the server through the at least one network;
wherein the application is configured to perform processing in response to at least one command from the client device sent through the secure browser of the virtual desktop.